Control systems device remotely accessed by threat actor
- Event Year
- 2014
- Reliability
- Confirmed
- Country
- United States
- Industry
- Unknown
- Attack Type
- Targeted Attack
Description
ICS-CERT (now CISA) disclosed in 2014 that a threat actor had gained unauthorised remote access to a public utility's control system using a brute-force attack against an internet-exposed authentication portal. The asset owner was not named and no operational impact was reported.
Impact
ICS-CERT confirmed the actor reached the HMI but found no evidence of process manipulation. The incident was used as the basis for guidance on internet-exposed OT.
Sources
Source list compiled from OTCAD (Stash Kempinski / Secura, GPL-3.0). Description is risidata's own prose.