The Oak Ridge National Laboratory in Tennessee and the Los Alamos National Laboratory in New Mexico have been hacked in a security incident which raises concerns about the security of American military laboratories.
The Los Alamos attack is the least known to the public while the Oak Ridge lab attack reveals a bot more details. Fears are that the two attacks are interlinked even though there is not enough information to confirm the success of the attack against Los Alamos labs.
An Oak Ridge spokesman said the attacks occurred in the form of phishing e-mails with malicious attachments that the hackers sent to the e-mail ids of personnel working at the lab. The general assumption currently is that these attachments, if opened, would have resulted in the release of Trojans that had the ability to sidestep all the security systems in place at the lab internally. The first wave of attacks started on October 29.
Describing the attack on the Oak Ridge laboratory as a ‘sophisticated cyber attack’, a lab spokesman said the hackers had gained access to a database the lab maintained about visitors to the lab between 1990 and 2004. The visitors’ information on the database included vital data such as their birth dates and social security numbers.
What makes the hacking of the Oak Ridge lab computers all the more worrisome is the fact that about 3,000 people visit the lab each year, and the visitors’ list here makes up literally the who’s who of the U.S. science community.
The Oak Ridge lab serves multiple purposes. This science laboratory specifically dabbles in military research, and is where the technological expertise that the homeland security people use originates. It also is home to one of the fastest supercomputers in the whole world.
The Los Alamos lab is another multipurpose lab, though its area of specialization is specifically research in nuclear weapons. Currently it is one of only two labs in the U.S. working on an issue of such a highly sensitive nature.
However, over the years, security at Los Alamos has become somewhat of a laughing matter, with a number of security breaches being recorded over the past few years. As recently as August this year, the lab apparently released highly sensitive data related to nuclear research over e-mail. Again, in 2006, a USB data stick with information on nuclear weapons tests had been recovered from a drug dealer.
The latest attack is another blot on the security apparatus at Los Alamos. What is more worrying probably is the fact that the two attacks on the two different facilities could be part of one coherent and cohesive plan possibly involving a rival government. Another possibility, all the more worrying, is that the theft of data could merely be a cover for something much more serious.