A breakdown of Denmark’s train network last weekend was the result of a hacker attack on an IT subcontractor’s software testing environment, Danish train operator DSB said Thursday.

“We were contacted by our subcontractor who told us that their testing environment had been compromised by criminal hackers,” DSB’s chief of security, Carsten Dam Sonderbo-Jacobsen, told public broadcaster DR.

“It hasn’t targeted infrastructure or DSB, it was economic crime,” Sonderbo-Jacobsen said in a Reuters report, adding it was not clear who was behind the attack, but that investigations were ongoing.

While not a direct attack on DSB, the attack prompted subcontractor Supeo to shut down its servers, which in turn affected locomotive drivers’ ability to operate the trains for several hours on October 29, according to the DR report.

Trains throughout the country stopped running in the morning on Oct. 29 and only started running again at 1 p.m. and DSB said it expected regional and long-distance trains would not run fully until the next day, October 30, according to the DR report.

Schneider Bold

At the time, DSB said the stopped train traffic is due to an error in the safety-critical IT system.

It is a digital version of the work documents that you carry around as a train driver. It is absolutely fundamental train engineers have the informatin to allow them to operate the train.

That information would include how fast you can drive on different sections and whether there is track work, said head of information at DSB Tony Bispeskov in the DR report.

He also said the massive problems are due to the fact that the supplier of ‘The Digital Backpack 2’, Supeo, stopped using the IT system after a security problem.

We have an external supplier who reported a security flaw, and therefore it has not been possible to use ‘The Digital Backpack 2,’ he said in the report.

“We are of course curious as to what the security breach consists of, but we simply do not know the answer yet. We will of course dive into it,” Bispeskov said in the report.

ISSSource

Pin It on Pinterest

Share This