Hacked a Nuclear Security System in Spain, Disrupting Service in Some Areas for Months

Spanish police announced that they had arrested two hackers. The duo is believed to be responsible for the attacks on the Radiation Alert Network (RAR) between March and June 2021.

The two arrested are ex-employees of the outsourcer who was contracted to provide maintenance services for the radiation warning network system for the Spanish Civil Defence and Emergencies Headquarters (DGPGE). Because of this, the duo has an in-depth understanding of how the system works and how to carry out targeted cyberattacks.

The two arrested individuals had illegally accessed the Emergency Headquarters network and attempted to delete the radiation alert network management web application within the control center.

At the same time, the duo launched a separate attack on the sensors, disconnecting them from the control center, disrupting data exchanges, and causing 300 of the 800 sensors spread across Spain to stop working.

The sabotage against the Radiation Alert Network ceased in June 2021 after authorities discovered the breach and launched an immediate investigation with the assistance of the National Police Cybercrime Unit. Finally, after tracking the hackers for a year, the police finally found the person responsible for the cyber attack.

“In accordance with two orders issued by the Court of Inquiry No. 39 of Madrid, the police carried out a coordinated operation in Madrid and San Agustin de Guadalix, conducting searches of two houses and a company, and found a large number of Computer and communications equipment related to the case.”

Attacks Raise Serious Nuclear Security Risks

Spain operates seven nuclear reactors in six power plants in Cáceres, Tarragona, Valencia, Guadalajara, Salamanca, and Córdoba, supporting about a fifth of the country A power demand.

The role of the Radiation Alert Network system is to detect abnormal rises in radiation levels and issue alerts to help government authorities take protective measures, detect problems, and remediate them.

The Radiation Alert Network system has 800 gamma radiation sensors deployed in specific locations throughout Spain, each connected via a telephone line to the control center at the headquarters of the Emergency Situation Headquarters.

The cyberattack prevented 300 of those sensors from transmitting their counts back to the control center, leaving Spain at serious risk of not being able to respond immediately to a radiation surge.

Police did not provide further details in the bulletin, so it is unclear exactly why the suspect launched the attack.
Caber attacks are not curable in a single day. To avoid harm from cyberattacks, a long-term commitment to data security is required. Long-term data backup is necessary for good data security. Traditional data backup solutions are becoming more unsuitable for meeting corporate objectives as modern businesses and the volume of firm data grow. As a result, many businesses will choose virtual computers to backup their data, such as VMware Backup or Hyper-V Backup.