At this time, the identity of the threat actor is unknown. However, it is worth noting that last week, BfV, the German intelligence service, warned firms of cyberattacks by the APT27 hacking group. The group is supported by the Chinese state and was actively exploiting the Microsoft Exchange vulnerability last year.
Oiltanking Declared Force Majeure After the Cyber Attack
Oiltanking has actively operated in the fuel tanking space since 1972. In fact, it is one of the biggest global independent operators of tank terminals for chemicals, gases, and oils. The company operates 13 tank farms in Germany. On Saturday, January 29th, the company faced a cyber attack, causing it to declare a force majeure for a large part of its German supply activity. A force majeure declaration means that a company is unable to fulfill its side of a contract due to events outside its control. This generally includes national disasters or other unforeseen events. Furthermore, the full extent of damage caused is unclear. Marquard & Bahls did not provide any further details about the attack. The company stated,”We are working to solve this issue according to our contingency plans, as well as to understand the full scope of the incident.” On a positive note, Oiltanking’s global operations are continuing despite the cyber attack. This is not the first time a major fuel company has faced a high-profile cyber attack. Last year, a cyber attack shut down the US’ largest refined fuel pipeline.
Germany’s Fuel Supply Does Not Appear to be in Danger
Oiltanking is one of the biggest fuel suppliers to Shell, which operates 1955 gas stations in Germany. Therefore, the attack has raised concerns about possible fuel shortages for Shell and its consequent impact on the country’s economy. Thankfully, it appears as if Germany’s fuel supply and transportation are secure. Frank Shaper, managing director of Germany’s independent tank storage association, said neither the heating nor the transportation aspects of German fuel supply is under threat. However, the country’s fuel supply chain could worsen if the IT issues caused by cyber attacks remain unresolved. The cyber attack has shut down Oiltanking’s loading and unloading process. The process is completely computerized, and it is not possible to shift back to manual controls.