No criminal group has yet been held responsible for the attack.
Executives from tech-based consulting firm, Seoul Orions, a subcontractor for the Department of Energy one who deals with nuclear weapons, cconfirmed to Granthshala News that it learned of the cyber-breach sometime last month.
“Upon discovering suspicious activity in our network environment, our IT professionals immediately secured the system and we quickly fixed the priority company systems,” Sol Orions said in a statement to Granthshala News.
The firm did not clarify the exact date the attack became known or whether it was another ransomware hit, but said that “relevant local, state and federal agencies” had been notified.
“The investigation is ongoing, but we have recently determined that an unauthorized person has obtained certain documents from our system,” Sol Orions said. “Those documents are currently being reviewed, and we are working with a third-party technical forensics firm to determine the scope of potential data that may be involved.”
The consulting firm was reportedly working with DOE’s National Nuclear Security Administration – the federal agency tasked with increasing and securing the US nuclear stockpile.
The nature of Sol Orion’s work with the nuclear agency is unclear.
Senate Sergeant on Weapons Calls Cyber Attacks Bigger Threat Since January. repeat 6
DOE did not respond to questions from Granthshala News regarding a cyber breach at one of its subcontractors.
Sol Orions confirmed that the perpetrators did not receive or threaten “client classified or critical security-related information”.
The attack on the DOE subcontractor was announced just a day after the revelation that JBS, the world’s largest meatpacking company with locations in the US, had paid cybercriminals $11 million after being targeted on May 30.
Operations were temporarily halted at nine locations in the US, with disruptions in other international locations.
News of JBS’s ransom comes after Colonial Pipeline was attacked by cybercriminals last month to pay nearly $5 million.
Both of those attacks have been attributed to a Russian-based criminal organization known as Revil.
No group has yet been held responsible for the attack on Sol Orion.