Tanker trucks are parked near the entrance of Colonial Pipeline Company Wednesday, May 12, 2021, in Charlotte, N.C.  THE CANADIAN PRESS/AP-Chris Carlson

Cybersecurity experts say Canadian businesses can learn from U.S. pipeline attack

Cybersecurity experts say Canadian businesses can learn from U.S. pipeline attack

TORONTO — Canada’s two largest pipeline companies say they have taken a proactive approach to avoid the type of cyberattack that has disrupted gasoline supplies in the U.S. Southeast and contributed to higher retail gasoline prices across North America.

Hackers were able to seize control of computer systems for the Colonial Pipeline, locking access, and demanding a ransom to release them. Partial service was restored manually late Monday but a full recovery isn’t expected to be complete until the weekend.

TC Energy and Enbridge, both based in Calgary, say they regularly take precautions including technology and training to protect their operations from cyberattacks.

Vivek Gupta, who heads BDO Canada’s cybersecurity practice, says pipelines have always been targets for cyberattacks because of the potential for a high payout.

“Having said that, ” he adds, “this is a one-of-a-kind attack from a scale perspective. It’s the biggest pipeline attack, from what I can tell, in at least 20 to 25 years.”

He says organizations are usually aware that ransomware, which was used in the Colonial Pipeline attack, can shut down their operations but often don’t take full precautions.

“It’s unfortunate that an event like this is what sort of wakes a lot of people up,” says Gupta.

Gupta and other cybersecurity experts say a common way for hackers to penetrate security is to trick employees through emails or texts that allow disruptive software into corporate systems.

A Proofpoint survey of 1,400 chief information security officers from 14 countries, found that email fraud was identified as the top cybersecurity problem for the Canadian CISOs.

Other problems cited by the Canadian respondents to the first-quarter survey was the use of unauthorized devices or software, as well as weak passwords.

Proofpoint spokeswoman Lucia Milica says human error was cited as the biggest vulnerability by 51 per cent of the Canadian cybersecurity chiefs.

Robert Falzon, a Canadian spokesman for Check Point, says companies can also create a security gap when they turn to remote servers or cloud email services from Microsoft or Google.

He says problems can arise if those companies don’t also update their existing authentication systems that keep a central record of usernames, passwords and other identification data.

“Hackers know what they’re doing. They’re attacking the weakest point, which are these legacy systems,” Falzon says.

The U.S. Federal Bureau of Investigation said that a group called DarkSide was behind the ransom attack. Colonial Pipeline has said little about how it fell victim to the attack.

Statements from TC Energy Corp. and Enbridge Inc. didn’t refer to any details of the attack on Colonial Pipeline attack, which delivers about 45 per cent of the gasoline used along the U.S. East Coast.

TC Energy says it has “a well-developed cybersecurity program which we continue to advance and innovate to protect our data, systems and assets.”

And Enbridge Inc. says it has “invested significantly in cybersecurity through the years,” and tests and monitors its systems regularly.

Neither company addressed specific details about the attack on Colonial,

A large part of the Colonial pipeline service resumed operations on Monday, and authorities say there’s no gasoline shortage, but panic buying has contributed to more than 1,000 filling stations running out of fuel, The Associated Press reported Wednesday.

The FBI said Monday it had confirmed that Darkside ransomware was responsible for the Colonial shutdown — indicating it was the work of an organized crime operations.

— With files from The Associated Press

This report by The Canadian Press was first published May 12, 2021.

Companies in this story: (TSX:ENB, TSX:TRP)

David Paddon, The Canadian Press

Pipeline

Just Posted

CMHA
Mental health support centre in central Alberta to receive funding

Shoppers Drug Mart is lending support to the Canadian Mental Health Association.… Continue reading

Downtown Red Deer was packed with people who lined the streets to watch the Westerner Days parade on Wednesday. (Photo by SUSAN ZIELINSKI/Advocate staff)
Westerner Days parade cancelled, full details on modified event coming June 28

The 2021 edition of Westerner Days will look much different than any… Continue reading

City council wants to hear from the public at a May 25 hearing about whether the temporary homeless shelter should be allowed to remain in the downtown for another year. (Advocate file photo).
City of Red Deer staff to recommend another extension to allow operations at current temporary shelter site

Following some more research city administration has received no other new locations… Continue reading

A scene from the short Western ‘Cheaters, Robbers and Outlaws,’ written and directed by Jason Steele, with support from Telus Storyhive. (Contributed image)
Red Deerians make ‘Cheaters, Robbers and Outlaws’ short Western film

Writer and director Jason Steele received a $20,000 Storyhive grant from Telus

Residents in several neighbourhoods reported little to no water pressure Tuesday night. (File photo by Advocate staff)
City hall to reopen for payments and customer service

Red Deer City Hall will reopen on June 21 for utility and… Continue reading

Harley Hay
Harley Hay: You can’t trust Mondays

Monday isn’t my favourite day. It insists on occurring right after a… Continue reading

Montreal Canadiens goaltender Carey Price stops Vegas Golden Knights' William Karlsson as he is covered by Canadiens' Joel Edmundson during first period of Game 3 of the NHL Stanley Cup semifinal Friday, June 18, 2021 in Montreal. THE CANADIAN PRESS/Paul Chiasson
Andreson’s timely scoring, Price’s goaltending give Habs 2-1 series lead over Vegas

Canadiens 3 Golden Knights 2 (OT) (Montreal leads series 2-1) MONTREAL —… Continue reading

Atlanta Hawks guard Trae Young (11) is defended by Philadelphia 76ers guard Ben Simmons (25) as he looks for an opening during the first half of Game 6 of an NBA basketball Eastern Conference semifinal series Friday, June 18, 2021, in Atlanta. (AP Photo/John Bazemore)
Curry, Harris help 76ers stay alive, hold off Hawks 104-99

76ers 104 Hawks 99 (Series tied 3-3) ATLANTA — Seth Curry hit… Continue reading

Canadian Prime Minister Justin Trudeau is seen during a joint news conference following the EU-Canada Summit, in Brussels, Belgium, Tuesday June 15, 2021. Trudeau says Canada is on track now to have 68 million doses delivered by the end of July, which is more than enough to fully vaccinate all 33.2 million Canadians over the age of 12. THE CANADIAN PRESS/Adrian Wyld
Vaccine deliveries enough to fully vaccinate all eligible Canadians by end of July

OTTAWA — Prime Minister Justin Trudeau’s promise of a two-dose fall is… Continue reading

Marco Mendicino, Minister of Immigration, Refugees and Citizenship, speaks during a press conference in Ottawa, Thursday, May 13, 2021. Mendicino has announced a new policy to help settle 500 refugees and their families in a news conference today. THE CANADIAN PRESS/Sean Kilpatrick
Canada to welcome 45,000 refugees this year: Immigration Minister Marco Mendicino

Immigration Minister Marco Mendicino announced plans to expedite applications and increase the… Continue reading

Louis Oosthuizen, of South Africa, plays his shot from the third tee during the second round of the U.S. Open Golf Championship, Friday, June 18, 2021, at Torrey Pines Golf Course in San Diego. (AP Photo/Marcio Jose Sanchez)
Bland leads at Torrey and shows the US Open is truly open

SAN DIEGO — The U.S. Open prides itself on being the most… Continue reading

The Prime Minister's car waits outside the National Microbiology Laboratory in Winnipeg Tuesday, May 19, 2009. The head of the Public Health Agency of Canada is showing no sign he'll release unredacted documents about the firing of two scientists at Canada's highest security laboratory — despite the prospect of being publicly shamed in the House of Commons for his refusal to turn them over. THE CANADIAN PRESS/John Woods
PHAC head maintains he’s bound by law not to release docs on fired scientists

OTTAWA — The head of the Public Health Agency of Canada is… Continue reading

Chief Public Health Officer Theresa Tam listens to a question during a news conference, in Ottawa, Tuesday, Jan. 12, 2021. The number of confirmed COVID-19 cases attributed to the highly contagious Delta variant grew in Canada this week. THE CANADIAN PRESS/Adrian Wyld
Public health agency reports spike in confirmed cases of Delta variant in Canada

OTTAWA — The number of confirmed COVID-19 cases attributed to the highly… Continue reading

Most Read