JCI hack

[Flying_Lavey]

So has anybody heard about the JCI hack? JCI being Johnson Controls Industries. Not only is it a big problem because it hinders the manufacturing production they own, but I have been told that the hackers have stolen 21TB of data which includes plans to highly secure government building since JCI is in so many government buildings for Building Management Systems. This could be a bad deal if the wrong people are behind this.

 

[HNL2LHC]

Come on don’t worry the government will come along and save us.

 

[bonesfab]

Probably already on hunters laptop.

 

[monkeyswrench]

I'm going to go out on a limb here, the wrong people are behind it! I highly doubt it was a church group project.

JCI setups run a lot of the fire suppression and integration controls if I'm not mistaken. Not only would bad actors have the layout in engineered drawings, but could also tell by the ventilation, plumbing and electrical schematics what is located where within the facilities. Most blueprints wouldn't be labeled "centerfuges" or "bio-weapons", but all that could be easily deduced with schematics.

NFB...No F'n Bueno!

 

[Wedgy]

Chyyyynnnna...

 

[monkeyswrench]

Chyyyynnnna...

Or Russia. "Killnet" recently shut down a couple different companies internal comms for the day.

 

[Wedgy]

NFB indeed. No Bueno.
Not sure if Johnson Controls in into these, but, escalators, elevators. Conveyor systems. Hospitals oh my.
Building controls. Las Vegas...

 

[Racey]

I can tell you this about JCI, from one of my very close friends that is a master level Controls and Automation guy:

Johnson Controls has a reputation for being the most half assed, hack installation, and kindergarten level programming and setups. A good amount of his business is going back to fix shit they have totally fucked up here in Vegas.

He doesn't know how they haven't been totally run off the strip....

 

[Wedgy]

I can tell you this about JCI, from one of my very close friends that is a master level Controls and Automation guy:

Johnson Controls has a reputation for being the most half assed, hack installation, and kindergarten level programming and setups. A good amount of his business is going back to fix shit they have totally fucked up here in Vegas.

He doesn't know how they haven't been totally run off the strip....

"I know, right? I couldn't believe it either, the first time I ever saw an Inspector take a bribe..." Anonymous

 

[CigAjerk]

I can tell you this about JCI, from one of my very close friends that is a master level Controls and Automation guy:

Johnson Controls has a reputation for being the most half assed, hack installation, and kindergarten level programming and setups. A good amount of his business is going back to fix shit they have totally fucked up here in Vegas.

He doesn't know how they haven't been totally run off the strip....

more to your point....

I needed JCI to come shut down a fire alarm module at Chandler Fashion Center so we could demo a hood vent and remove fire suppression system without setting off the alarms. After 30 phone calls, 4 weeks and $1700 later a guy finally shows up. We have security put the system down for 24hrs, JCI tech is dicking around with his laptop tied into the main system, using my ladder to inspect the connection outside the suite, 6 hours later tech figured out it was never connected to begin with.

 

[Racey]

"I know, right? I couldn't believe it either, the first time I ever saw an Inspector take a bribe..." Anonymous

Or an internal project manager / vp...

 

[Pattle]

Timely thread for us as well. I just got an earful from our GM who is struggling to coordinate between JCI and ATT on a supposed upgrade to our phones and alarms. Total cluster with both huge, bureaucratic companies. Unable to get proper communication. Nobody wants to make a decision. When a decision sort of gets made, some supervisor from out of nowhere on the East coast decides they need to be involved and the whole thing starts over.

Apparently we had a local company install the alarm years ago, but they got bought out by JCI some time back. At this point, the GM wants to try to find another local alarm company and reinstall.

 

[Flying_Lavey]

more to your point....

I needed JCI to come shut down a fire alarm module at Chandler Fashion Center so we could demo a hood vent and remove fire suppression system without setting off the alarms. After 30 phone calls, 4 weeks and $1700 later a guy finally shows up. We have security put the system down for 24hrs, JCI tech is dicking around with his laptop tied into the main system, using my ladder to inspect the connection outside the suite, 6 hours later tech figured out it was never connected to begin with.

Timely thread for us as well. I just got an earful from our GM who is struggling to coordinate between JCI and ATT on a supposed upgrade to our phones and alarms. Total cluster with both huge, bureaucratic companies. Unable to get proper communication. Nobody wants to make a decision. When a decision sort of gets made, some supervisor from out of nowhere on the East coast decides they need to be involved and the whole thing starts over.

Apparently we had a local company install the alarm years ago, but they got bought out by JCI some time back. At this point, the GM wants to try to find another local alarm company and reinstall.

JCI has been slowly buying up smaller FLS contractors over the past few years and they are HORRIBLE to deal with. Zero desire to coordinate with others, ZERO desire to help the customer get their system working (although being paid to do so), etc. Just terrible and even worse since they are massive and things can be swept under the rug all too easily.

 

[500bbc]

Probably already on hunters laptop.

By cracky!

 

[was thatguy]

Don’t know why anyone goes through the trouble of hacking, any secure shit we have is always for sale.

 

[monkeyswrench]

Don’t know why anyone goes through the trouble of hacking, any secure shit we have is always for sale.

I always wonder how often "hackers" are really to blame. It's an easy out to point somewhere else, and not have to admit an employee just up and retired to the Bahamas.

 

[Flying_Lavey]

I always wonder how often "hackers" are really to blame. It's an easy out to point somewhere else, and not have to admit an employee just up and retired to the Bahamas.

Well this one is ransomware also for $51 mil. So..... maybe legit hack?