Cybersecurity for haulage operators

Cybersecurity is a growing concern for business in fields ranging from accident repairs to catering and the haulage industry is no exception. Traditionally, the field has been isolated from significant development in information technology but recent events show it must protect both itself and the country as a whole or be at significant risk.

In January 2023, the ROYAL MAIL GROUP PLC was subject to a ransomware attack suspected to originate from Russian hackers. Ransomware is a form of malicious computer software that can both encrypt and steal data whilst simultaneously preventing an individual or company from accessing their system. In the case of Royal Mail, the #Lockbit software was used to prevent software used to manage parcels being distributed abroad from functioning properly. A total of five distribution centres were affected including the Heathrow Distribution Centre in Slough. As ransom for the parcel management software, the hackers demanded millions in Bitcoin #BTC.

The Welsh haulage operator the Owens Group UK has been further subject to a ransomware attack. In this example, the Lockbit ransomware was used to exploit vulnerabilities in the Owens Group systems and leak considerable amounts of confidential personal and financial information. As the International Business Times has noted, data breaches of this nature have financial, legal and security related implications. Little evidence is available to confirm the exact financial impact on the Owens Group, but Andrew Martin - CEO of DynaRisk - has estimated that the average ransom is between $1 - $2 million.

The safe and secure  function of the UK’s haulage sector is paramount to the proper functioning of our society. In the examples described above, the implications of the cyberattacks were primarily financial, but a state sponsored cyberattack - as has been alleged to have been done by the Russian Federation and the Democratic People’s Republic of Korea - could impact on the distribution of food, fuel and other goods. Consequently, haulage operators should view their cybersecurity as part of the integrated solution to the cybersecurity of the nation.

As such, haulage operators should undertake thorough reviews of their cybersecurity. This review should be wide in scope and include all pieces of technology integrated into their network. Given the relative specialty of this undertaking, it is likely that hauliers will be required to consult with specialists in this field. This undertaking will, unfortunately, be costly and will incur considerable contractors fees and mandate investments in new technologies. To encourage reviews and investment in cybersecurity, the government could offer financial incentives for haulage operators. Governmental and non-governmental organisations must consider this issue holistically - as we consider the security of our ports and seas - to ensure the continued integrity of the country's supply chain.

Investment in developing cybersecurity will not only protect the organisation financially and legally, but the country as a whole. To achieve this common goal, both haulage operators and the government must research, invest and develop concurrently.