Canadian warnings highlight cyber tampering risks in critical infrastructure
What happened
The Canadian Centre for Cyber Security issued warnings regarding cyber tampering risks across critical infrastructure, including hospitals and industrial systems. This follows an incident in France where malicious actors manipulated internet-connected refrigeration controllers made by Danfoss in over 500 stores, causing millions of euros of food spoilage and equipment damage. In Canada, the government previously warned about tampering with controls at facilities, including changes to water pressure at a treatment plant and manipulation of tank gauges at an oil and gas company.
From theglobeandmail.com
Why it matters
The incidents raise serious questions about the vulnerabilities in physical systems that rely on network connectivity and software controls. The reliance on foreign private firms to operate public infrastructure, such as baggage handling systems, is highlighted by these hacks.
From theglobeandmail.com
Who's involved
- Canadian Centre for Cyber SecurityIssued warnings about cyber tampering risks in critical infrastructure.
- DanfossManufactured the refrigeration controllers affected in the French incident.
- CarrefourRetailer affected by the refrigeration controller tampering in France.
- MonoprixRetailer affected by the refrigeration controller tampering in France.
Who could feel it
Possible knock-on effectsThese are possibilities Brind reasoned out, not predictions, and not advice. Most are not stated in any report.
- DanfossSpeculative
Might face regulatory action or market price changes due to product vulnerability and liability demonstrated in France.
- CarrefourSpeculative
Could face increased operational costs and reduced revenue due to product vulnerability leading to massive food spoilage.
- MonoprixSpeculative
Could face increased operational costs and reduced revenue due to product vulnerability leading to massive food spoilage.
- Inductive AutomationSpeculative
Might face increased liability and security costs due to critical infrastructure vulnerability in its SCADA software.
- Ignition SCADASpeculative
Might face increased liability and security costs due to demonstrated software vulnerability in critical systems.
Keep exploring
The entities involved
-
Danfoss
Danish manufacturing company
Nothing else this week.
-
Canadian Centre for Cyber Security
Nothing else this week.
-
Epic
a privately held healthcare software company