Events
Delivery
Physical access
Remote access
Radio frequency
RF Crane modification
2009 Texas Hospital HVAC operating room
Personal Medical devices
insulin pump
pacemaker
Access
hack
employee
former
current
open access
intercept/ replay
Action
Destruction
Indirect
Stuxnet
Disk erasing attack - Business IT systems deleted
https://en.wikipedia.org/wiki/Shamoon
Shionogi, Inc. OT systems deleted (Pharma)
IT servers deleted by former employee. The attack effectively froze operations for a number of days. The company suffered at least $800,000 in losses. 2011
Grocery Store Refrigeration
thermostat
Direct
Norsk Hydro
printer
Modification
Settings
Stuxnet
Pump Systems
2021 Florida water treatment plant
2012 A major sewage spill sent 2 million gallons of raw sewage into the Tijuana River in San Ysidro, California. A programmable logic controller failed shutting down pumps and controls.
2012 Nuclear plant water pump shutdown
https://www.dailyitem.com/news/computer-problem-prompts-nuclear-reactor-shutdown-at-berwick-area-plant/article_c640a196-f589-5a46-8260-acf037e0d26c.html
Vehicle
RF Crane modification/ movement
https://documents.trendmicro.com/assets/white_papers/wp-a-security-analysis-of-radio-remote-controllers.pdf
2012 A computer glitch caused the Superman: Ultimate Flight rollercoaster to become stuck at the top of a 150 foot hill.
Environmental
2009 Security guard accessed Texas hospital’s utilities including pumps and chillers in the operating room. Changed alarms and settings
Personal Medical devices
insulin pump
pacemaker
Grocery Store Refrigeration
Function
Deception
Setting
Stuxnet
2011 Malware - On August 20, 2008 Spanair flight 5022 crashed just after takeoff from Madrid-Brajas International Airport killing 154. 3 Alarms were not provided to pilots prior to takeoff.
2009 Security guard accessed Texas hospital’s utilities including pumps and chillers in the operating room. Changed alarms and settings
Thermostat
Function
Denial
Access