Michele Moss, Booz Allen Hamilton - Build Security In

Business Perspective
INCIDENT:
Telvent Canada, a company that provides industrial
automation technology to agencies managing the energy
industry, was the target of a malicious software attack.
Telvent stated someone installed the software and stole
files pertaining to control software for their electric grid
management. The malware used in the attack is believed
to be associated with a Chinese hacker group called
“Comment Group.” Comment Group has a history of
spying and hacking into important Western infrastructure
systems and databases.
IMPACT:
Files associated with the firm’s Supervisory Control and Data
Acquisition (SCADA) were stolen. The firm does not believe
the intruder stole any information that would enable them to
gain access to a customer system. The CEO of Digital Bond
believes the hackers are specifically targeting the industrial
control system sector.
Loss of Intellectual Property
MITIGATION:
As a precautionary measure the company indefinitely
terminated any customer system access by Telvent.
Telvent is actively working with law enforcement, security
specialists, and customers to ensure the breach has been
contained. Two days after the breach, Telvent partnered
with a security firm named Industrial Defender in order to
expand its cybersecurity capabilities.
Source: Don Davidson, DOD-CIO Trusted Mission Systems and Networks
• http://www.mnn.com/earth-matters/energy/stories/smart-gridcompany-telvent-struck-by-chinese-hackers
• http://news.cnet.com/8301-1009_3-57521049-83/maker-ofsmart-grid-software-discloses-hack/