In May, 22 utility companies were hit by a major cyberattack that nearly paralyzed the supply of electricity, heat and water. This is what the energy sector's trade organization, Green Power Denmark, writes on its website.
The attack was quickly detected without causing any damage to critical infrastructure. CTO Jørgen S. Christensen describes the attack as "the largest in Denmark ever".
- This is the closest we have come to hostile actors being able to turn off our electricity, heat and water, he says.
The cyberattacks occurred in two waves. In some cases, the hackers gained access to control systems, and several companies had to go into so-called island operation. This means that the IT systems are disconnected and the facilities are operated manually.
It was a network of sensors at SektorCert - the utility sector's cyber center - that detected the attacks. The sensors are installed at, among other places, electricity grid companies, district heating plants and water utilities. Jørgen S. Christensen believes that the attacks were carried out in a way that has never been seen before.
- We have not seen the extent, the precision and the professionalism before. These were attackers who knew in advance who they were going to hit. This shows that this is an actor with greater competence than we usually see in so-called ransomware attacks, says the technology director.
Signs of state interference
According to Jørgen S. Christensen, the seriousness is underlined by "signs that a state actor may be involved". He does not go into further detail about who this state actor could be.
At the state Center for Cybersecurity, which monitors the cyber threat against Denmark, the threat from cyber espionage against Denmark is described as "very high". The threat from destructive cyberattacks is, however, described as "low". This assessment has been in place since May. Head of Cyber Analysis Mark Fiedel tells DR News that the assessment has not changed.
- But at the same time, we assess that it is likely that hacker groups from foreign states, especially Russia, are trying to enter Danish networks. And because cyberespionage is a prerequisite for being able to carry out destructive attacks, it is extremely important that we take that threat seriously, says Mark Fiedel to DR.
Behind SektorCert - the utility sector's cyber center - are Green Power Denmark, Energinet, Danish District Heating and Danish Water and Wastewater Supply - Danva.
The Ministry of Climate, Energy and Utilities states that Minister Lars Aagaard (M) has no comment on the matter and refers to the Center for Cybersecurity.
/ritzau/
Text, graphics, images, sound, and other content on this website are protected under copyright law. DK Medier reserves all rights to the content, including the right to exploit the content for the purpose of text and data mining, cf. Section 11b of the Copyright Act and Article 4 of the DSM Directive.
Customers with IP agreements/major customer agreements may only share Danish Offshore Industry articles internally for the purpose of handling specific cases. Sharing in connection with specific cases refers to journaling, archiving, or similar uses.
Customers with a personal subscription/login may not share Danish Offshore Industry articles with individuals who do not themselves have a personal subscription to Danish Offshore Industry.
Any deviation from the above requires written consent from DK Medier.
