Ukrainian Nuclear Power Plant Employees Arrested for Cryptocurrency Mining
Several employees at a nuclear power plant in Yuzhnoukrainsk, Ukraine, have been arrested by the Ukrainian security service (SBU) for attempting to use the facility’s IT systems to mine for cryptocurrency. The incident, which occurred on July 10, raised concerns about the security of the nuclear facility and the potential disclosure of sensitive information.
Unauthorized Use of Supercomputer
According to local media reports, the employees connected a supercomputer, typically air-gapped at the power plant, to the internet in an effort to mine for cryptocurrency. In doing so, they inadvertently exposed information about the physical security measures in place at the nuclear facility, which is considered a state secret.
Seizure of Equipment
SBU officers seized unauthorized computer equipment used for cryptocurrency mining, including six Radeon RX 470 video cards, extension cords, switches, a motherboard, a USB flash drive, a hard drive, and a metal frame. Additional equipment was confiscated during searches at other parts of the facility, including premises used by a Ukrainian military unit stationed there.
Previous Incidents
This incident is not the first of its kind. In February 2018, engineers at the Russian Federal Nuclear Center were arrested for attempting to mine Bitcoin using a supercomputer. These incidents highlight the importance of monitoring for unauthorized activity in sensitive environments.
Cybersecurity Concerns
Phil Neray, VP of industrial cybersecurity at CyberX, emphasized the need for continuous monitoring in high-security settings. He stated, “Even with the strictest policies and regulations, it’s all theoretical if you aren’t continuously monitoring for unusual or unauthorized activity.”
Human Error in Industrial Environments
Recent research from Kaspersky revealed that human error was responsible for over half (52%) of cybersecurity incidents detected in industrial environments last year. These incidents underscore the importance of training employees on cybersecurity best practices to prevent unauthorized activities.
As incidents of unauthorized cryptocurrency mining in sensitive facilities continue to surface, organizations must remain vigilant in monitoring and securing their IT systems to prevent potential breaches of security and protect sensitive information.