Event description
State F’s critical infrastructure was hit by a massive cyberattack. Hackers breached the industrial systems of the oil and gas company Tube, causing a serious accident.
The adversaries gained access to the air cooling control system at one of the gas compressor stations. More specifically, they targeted the methanol supply. Methanol is a reagent that prevents the formation of hydrate plugs (crystalline blockages made of gas and water) in heat exchanger tubes. The attack stopped the flow of methanol into the tubes. By the time it was detected, hydrate formation had already been in progress for some time. This disrupted the heat exchange, caused a rise in pressure, and ultimately led to a complete shutdown of the equipment.
Attempts to restore the operation of the gas compressor station only worsened the situation: during the purging of the tubes, the newly-formed hydrate plugs started to be pushed through under high pressure, leading to a series of gas-dynamic shocks. The integrity of the process line was disrupted, resulting in a large gas leak. This triggered the emergency protection system, which completely stopped gas transportation.
Tube has been severely affected by the incident. Due to the lengthy repair of the complex equipment and ongoing works related to the elimination of the attack impact, gas supplies have sharply decreased. The company has suffered massive financial damage: considering all the repair costs, losses from downtime, and hefty fines for breaching contractual obligations, the damage amounts to millions of dollars. Experts doubt that Tube will be able to recover from the incident and restore its reputation.
Consequences
1. Damage to company property
2. Enterprise closure
3. Financial damage
This has happened before
The Record
Russian hacktivist threat on Canada’s pipelines is "call to action," top cyber official says
A cybersecurity incident affecting a Canadian gas pipeline was revealed in a trove of leaked U.S. intelligence materials that included an apparently intercepted conversation between a hacking group known as Zarya and an officer at Russia's Federal Security Service (FSB). According to the document, marked Top Secret, during this conversation the hackers claimed they could "increase valve pressure, disable alarms, and initiate an emergency shutdown of an unspecified gas distribution station" located in Canada.