America's nuclear power plants use passwords like '1234'

Cyber security
(Image credit: iStock)

The only thing preventing a possible nuclear reactor meltdown could be the password "1234," according to a new global study of power plant security systems, the Financial Times reports. Hacking into a power plant's computers could allow a malicious individual to tamper with cooling systems and back-ups to induce a nuclear meltdown. While the risk of damage is exponentially high in the case of a hack, new research has found that nuclear facilities have few measures in place to prevent a destructive cyber attack.

"Cyber security is still new to many in the nuclear industry," said Caroline Baylon, who authored the report. "They are really good at safety and, after 9/11, they've got[ten] really good at physical security. But they have barely grappled with cyber."

Subscribe to The Week

Escape your echo chamber. Get the facts behind the news, plus analysis from multiple perspectives.

SUBSCRIBE & SAVE
https://cdn.mos.cms.futurecdn.net/flexiimages/jacafc5zvs1692883516.jpg

Sign up for The Week's Free Newsletters

From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.

From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.

Sign up

Most facilities still do not take cyber security seriously enough in spite of such instances, Ms. Baylon said. Officials interviewed for the report, for example, described default vendor logins — the standard factory-set passwords such as "1234" — as being "everywhere" when it comes to the computer systems that regulate nuclear processes. [Financial Times]

Baylon added that many engineers and officials believe that because their computer systems aren't connected to the internet, they're immune to attacks — a mindset Baylon called "a culture of denial."

"Many people said it was simply not possible to cause a major incident like a release of ionizing radiation with a cyber attack... but that's not necessarily true," she said.

Explore More
Jeva Lange

Jeva Lange was the executive editor at TheWeek.com. She formerly served as The Week's deputy editor and culture critic. She is also a contributor to Screen Slate, and her writing has appeared in The New York Daily News, The Awl, Vice, and Gothamist, among other publications. Jeva lives in New York City. Follow her on Twitter.