back to article ALPHV blackmails Canadian pipeline after 'stealing 190GB of vital info'

Canada's Trans-Northern Pipelines has allegedly been infiltrated by the ALPHV/BlackCat ransomware crew, which claims to have stolen 190 GB of data from the oil distributor. ALPHV added Trans-Northern to its blackmail site on Tuesday and said the purloined files include "all important information." Presumably the crew wants …

  1. Woodnag

    Curious...

    How can the security measures not notice 190 GB being pulled?

    1. Phil O'Sophical Silver badge

      Re: Curious...

      You're assuming there were security measures...

    2. Anonymous Coward
      Anonymous Coward

      Re: Curious...

      How can huge social media companies, or companies storing very private data (23andme), not notice credential stuffing attacks? That’s probably easier to spot than large amounts of data leaving your network but you have to be watching for it. Until companies are made to pay for obvious security failures, they will only add basic monitoring after a successful attack. My employer invested the time and money to enable 2FA for domain access two weeks after ransomware destroyed our network. Prior to that it was too expensive and inconvenient. If there were financial penalties (or even CEO jail time - never happen) for poor security then maybe every IT department would have a security professional (who is invited to project meetings and listened to).

    3. ProbablyWrong

      Re: Curious...

      Is that sarcasm? I hope it's sarcasm.

      I just pulled the logs from my work laptop VPN client. I average about 250GB recieved traffic a day, and about 25GB back to the server. 5 days a week, 48 weeks a year... If I were to average my use across all the people in my position within the company, it's going to be in the range of about 27 Terabytes per day of VPN traffic. An IT dept. "not seeing" 190GB is pretty easy. Hell, I've got flash drives bigger than that to bring files to and from the office.

      1. Phil O'Sophical Silver badge

        Re: Curious...

        250GB per day is 24Mbit/s, continuously, 24 hours a day.

        As usage of a work laptop, I find that hard to believe.

    4. This post has been deleted by its author

    5. Anonymous Coward
      Joke

      Re: Curious...

      > How can the security measures not notice 190 GB being pulled?

      What security measures would that be?

  2. Snowy Silver badge
    Coat

    What

    What data would a company that runs a pipeline have that it adds up to over 190GB? Assuming they did not steal all their data.

    1. ProbablyWrong

      Re: What

      Are you kidding? 190 Gigabytes, not Terabytes... I'm pretty sure if I got 10 people together in my office we could beat 190GB in just email archives. a 256GB flash drive costs less than ordering pizza.

      1. Anonymous Coward
        Anonymous Coward

        Re: What

        Gastroenteritis of the data bloatification pipeline?

  3. sitta_europea Silver badge

    At any rate, full marks for the victim statement *not* saying how important security is to them.

  4. FuzzyTheBear
    Megaphone

    Oddly enough

    I have no pity at all for the owners of any important infrastructure , machinery , connected to the public internet at all.

    They know crackers will do what they do best , crack their security and make as much damage as they can.

    It's negligence at a whole new level.

    Don't blame crackers. Blame the companies for putting important infrastructure on a public network.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like