Breach at IN Utility

Monday, February 22, 2016 @ 04:02 PM gHale

Kankakee Valley REMC fell victim to a possible cyber-security breach, a company officials said.

The Wanatah, IN-based electric utility still does not know the extent of the hack.

Security Pros Confident in Attack Detection
Tracking ICS Threats Difficult
Attacks Grow in Oil and Gas
New Attack Divulges Password Length

The breach ended up revealed following a cyber-security audit conducted on the cooperative’s system in mid-January. Workers then discovered a foreign Internet Protocol address had accessed a storage device on the cooperative’s network, company officials said. Security professionals took immediate action and they removed the pathway.

The device accessed stored information of 17,700 Kankakee Valley REMC members. This information included: Member name, address, phone number, Kankakee Valley REMC location number, Kankakee Valley REMC member number and Kankakee Valley REMC account number.

No financial information or Social Security numbers of the membership ended up revealed during this breach, the company said.

“We do not know at this time if information was copied or taken from the area accessed on our system. What we do know is that the information was viewed. We are managing the incident as if the data has been compromised to ensure the highest level of protection to our membership,” said Kankakee Valley REMC chief executive Dennis Weiss.

To inform the Kankakee Valley REMC membership, the cooperative mailed letters explaining the possible data breach and encouraged members to take the necessary steps through the Office of the Indiana Attorney General website to protect their identity, the press release said.