Call us now:
Thank you for sharing Olaf Classen. One is not sure how concerned one should be about intrusions into CNI providers, least of all Energy. There is no doubt that they take place, and one suspects with a frequency that would raise concerns to most. In this case it took place in May 2023, it took 5 months to identify the details of local residents affected and write to the Iowa Office of the Attorney General.
The threat actor got access using a ‘previously compromised’ third party contractors account. Reconnoitered the network took 690 Gb of data, and a copy of the companies Active Directory, the crown jewels of access management and data. The enclosed only discusses the data breach, but the actor took a copy of AD. While the theft of data is important it raises the question of what else could the threat actor do, if they moved 690 Gb out the out unchallenged?
Under EU NIS 2 CNI providers will be required to provide an initial report a significant cyber incident in 24 hours.
Ted Dziekanowski Brian D. McCarthy Bob Dix Rachel V. Rose, JD, MBA
#paravasecuritysolutions #cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7122867314902872064