Event description
Tube’s drilling platform was hit by a serious incident, which is believed to be one of the most high-profile cyberattacks on oil and gas infrastructure. Hackers gained access to the enterprise’s industrial control system (ICS) and blocked the supply of the drill fluid to the shaft. The fluid, also known as drilling mud, plays a key role in the drilling process: it keeps the drill bit cool, reduces friction, and maintains pressure in the well.
Without the drill fluid, the pressure in the manifold began to rise rapidly and soon exceeded the critical value. The operators noticed the anomaly but couldn’t intervene as the ICS was under the hackers' control. The risk of gas leakage skyrocketed. The drill pump, operating at its limits, couldn’t handle the overload anymore—excess pressure ruptured the diaphragm of the safety valve, which was supposed to prevent such an accident. After the pump failed, the entire drilling process came to a halt.
The consequences of the attack were extremely severe. Tube had to urgently replace the damaged pump and safety valve, and several days of downtime cost the company millions of dollars.
The investigation revealed that the hackers acted with surgical precision: they exploited specific system vulnerabilities and followed a certain algorithm to inflict maximum damage. Analysts suggest that the hackers may have aimed to undermine Tube’s reputation or sabotage the company on behalf of competitors.
Consequences
1. Damage to company property
2. Financial damage
3. Reputational damage
This has happened before
The Record
Russian hacktivist threat on Canada's pipelines is "call to action," top cyber official says
A cybersecurity incident affecting a Canadian gas pipeline was revealed in a trove of leaked U.S. intelligence materials that included an apparently intercepted conversation between a hacking group known as Zarya and an officer at Russia's Federal Security Service (FSB). According to the document, marked Top Secret, during this conversation the hackers claimed they could "increase valve pressure, disable alarms, and initiate an emergency shutdown of an unspecified gas distribution station" located in Canada.