Cyber Incident Victim: State of Hawaii
Date:
Apr 2022
Location:
United States of America
Summary
A cyberattack targeting an underwater communications cable linking Hawai’i and the Pacific Region was prevented by Homeland Security Investigations (HSI), averting disruption to internet, phone, and cable services. The attackers breached servers of a private company associated with the cable infrastructure but caused no operational damage. HSI's Honolulu cyber-response team, alerted by mainland agents, identified an international hacking group responsible and made arrests, with no ongoing threats remaining. Officials emphasized the persistent cyber threats in the region and HSI's role in disrupting such attacks before critical harm occurs.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 7 motives | 6 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On or around April 1, 2022, Homeland Security Investigations (HSI) Honolulu branch prevented a cyberattack targeting servers associated with an undersea telecommunications cable linking Hawai’i and the Pacific Region to critical services, including internet, cable, and phone infrastructure. The breach was initially flagged by mainland-based HSI agents, prompting immediate engagement from HSI Honolulu’s specialized cyber-incident response team. Investigators confirmed that while the attackers compromised servers owned by a private company connected to the submarine cable system, the cable itself remained fully operational, and no service disruptions occurred. The agency emphasized that no damage to Hawai’i’s telecommunications infrastructure resulted from the incident, and no active threats persisted following their intervention. HSI Special Agent in Charge John F. Tobon characterized the event as part of a broader pattern of cyber threats facing Hawai’i and the Pacific, underscoring the agency’s role in disrupting such attacks before critical harm could be inflicted.
HSI investigators identified an international hacking group as responsible for the breach and executed arrests, though no additional details about the suspects or their methods were disclosed due to ongoing law enforcement proceedings. The agency’s public statement highlighted its transnational crime investigation mandate and reiterated its operational focus on both pursuing threat actors and supporting private-sector victims. Tobon noted HSI Honolulu’s frontline role in regional cyber defense, cautioning that Hawai’i’s geographic isolation did not reduce its vulnerability to digital threats. The incident concluded without functional impacts on the submarine cable’s operations or regional telecommunications, with HSI confirming all mitigations were effective. No further compromises or related activities were reported following the containment.