Security News > 2023 > October > US construction giant unearths concrete evidence of cyberattack
For years it seemed as though the construction industry was "Immune" to security attacks, according to a research paper [PDF] by the Association of General Construction of America in 2021.
Why? "Threat actors know that the construction industry is in some areas behind in data security and privacy initiatives. This is in large part because this industry, to date, avoided heavy regulation in data security and privacy laws. The limited regulation and guidance in the construction industry may have contributed to less focus on cyber security than in other industries."
Many construction businesses are also using machine learning and robotics more, which poses a potential risk.
"These new technologies still require data security and privacy risk assessments and proper controls in place, something that may be a second thought for those in the construction industry that may not have historically had cybersecurity top of mind."
"The exposure of cyberattacks in construction, in part, is amplified by the amount of confidential and proprietary information digitally stored and shared across projects and their long information technology chains," the reports adds.
"Infrastructure, financial accounts, as well as the data of employees, projects, and business sensitive information may be at risk. Accordingly, the number of cyber security attacks in the construction industry are growing exponentially."