British Nuclear Power Facility Attacked

Britain’s oldest and most vulnerable nuclear power plant, Sellafield, might have been hacked into by cyber groups closely linked to Russia and/ or China it has been claimed by The Guardian newspaper. 

The newspaper claims the plant has come under cyber attack by groups closely linked to the two nations,  although the plant itseld says it is not aware that it has been hacked. 

Sellafield (pictured) is located on the coast in Cumbria, is a former power station that now processes nuclear waste from across Britain. The site has the largest store of plutonium on the planet and is a repository for nuclear waste from weapons programmes and decades of nuclear power generation. 

Sellafield's managemnet are said to be unaware when the site was first hacked, but came across sleeper malware, which can be used to spy or attack systems, as far back as 2015. It is not clear if this malware is still present in computer systems, with its existence allegedly covered up by senior staff.

In 2018 a nuclear power sation in Germany was found to have been infected with computer viruses. Built more than 70 years ago the Sellafield site is no longer used for power generation and has been used to make plutonium for nuclear weapons and has also taken in radioactive waste from other countries for reprocessing.

The Guardian's investigation suggests the Sellafirld management do not know exactly when the IT systems were first compromised. But sources said breaches were first detected in 2015, when experts realised sleeper malware, software that can  be used to spy or attack systems, had been embedded in the plant’s computer networks. It is not known if the malicious software has been removed, raising concerns about the leakage of sensitive and important information.

In response to the newspaper report,the UK government has said there is no records or evidence to suggest that networks at the Sellafield nuclear site were the victim of a successful cyber attack by state actors.

Espionage by Russia and China are among the biggest threats to the UK, according to government security officials and the most recent National Risk Register, an official document that outlines the key hazards the UK could face, includes a cyber-attack on civil nuclear infrastructure.

Guardian:    SellafiledLtd     Gov.UK:     Gov.UK:     Energy Live:    Reuters:     GBNews:    ITV:     Mail

Images: @SellafiedUK & moneycortex

You Might Also Read: 

Indian Energy Company Hit By Cyber Attack:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

 


Cyber Security Intelligence: Captured Organised & Accessible



 

« Cyber Criminals Go Phishing
Global Guidelines For Artificial Intelligence Agreed »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Irish Reporting & Information Security Service (IRISS)

Irish Reporting & Information Security Service (IRISS)

IRISS-CERT is Ireland's first CSIRT (Computer Security Incident Response Team) to provide services to all users within Ireland.

Data Security Council of India (DSCI)

Data Security Council of India (DSCI)

DSCI is a premier industry body on cyber security and data protection in India, committed to making the cyberspace safe, secure and trusted.

APERIO

APERIO

APERIO, the global leader in industrial data integrity, helps its customers drive profitability and sustainability while mitigating risk in their industrial operations.

ShorePoint

ShorePoint

ShorePoint is an elite cybersecurity firm dedicated to improving the cyber resilience of Federal agencies and their missions.

Satori Cyber

Satori Cyber

The Satori Cyber Secure Data Access Cloud is the first solution on the market to offer continuous visibility and granular control for data flows across all cloud and hybrid data stores.

Vietnamese Security Network (VSEC)

Vietnamese Security Network (VSEC)

Vietnamese Security Network (VSEC) is an information security company providing website vulnerability scanning and monitoring services.

Swiss It Security Group

Swiss It Security Group

Swiss It Security Group offers clients complete IT security concepts based on innovative solutions and technology, with a focus on protection, detection and defence.

Mosaic Insurance

Mosaic Insurance

Mosaic is a next-generation global specialty insurer distinguished by an exceptional team, agile technology, and a structure that combines Lloyd’s of London strength with a global distribution network

Mainstream Technologies

Mainstream Technologies

Mainstream Technologies is an information technology services firm specializing in custom software development, managed IT services, cybersecurity services and hosting.

Dope Security

Dope Security

Dope Security is a fly-direct Secure Web Gateway that eliminates the data center stopover architecture required by legacy providers, instead performing security directly on the endpoint.

Wadilona Cyber Securities

Wadilona Cyber Securities

Wadilona Cyber Securities' sole aim is to bring and secure Information and Communications Technology (ICT) to and work for humans in its simplest terms.

e-Xpert Solutions

e-Xpert Solutions

e-Xpert Solutions is a company specialized in the Information Security field since 2001. Our skills are strong technical expertise and the development of tailor-made solutions.

Acronis

Acronis

At Acronis, we protect the data, applications, systems and productivity of every organization – safeguarding them against cyberattacks, hardware failures, natural disasters and human errors.

Solvo

Solvo

Solvo enables security teams and other stakeholders to automatically uncover, prioritize, mitigate and remediate cloud infrastructure access risks.

Contextal

Contextal

Contextal develops cutting-edge open-source cybersecurity solutions, designed to connect the dots and detect complex threats, which slip through the existing protections.

Assura

Assura

Assura provides innovative cybersecurity advisory and managed services to all industries including government, healthcare, financial, manufacturing, and transportation sectors.