United States of America

Summary

A cyberattack targeting servers linked to an underwater telecommunications cable connecting Hawai'i and the Pacific Region was prevented by Homeland Security Investigations (HSI) Honolulu. The international hacking group breached a private company's infrastructure associated with the cable but caused no service disruptions or damage to telecommunications within the state. HSI's cyber-incident response team, alerted by mainland agents, identified the perpetrators and made arrests, with further law enforcement actions pending. Officials emphasized the persistent cyber threats facing the region despite the prevention of this incident, noting HSI's role in disrupting transnational criminal activities before significant harm occurs.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On or around April 1, 2022, Homeland Security Investigations (HSI) Honolulu branch prevented a cyberattack targeting an underwater telecommunications cable linking Hawai’i and the Pacific Region to critical services including internet, cable, and phone connectivity. The attack involved a breach of servers belonging to a private company associated with the undersea cable infrastructure, though the cable itself sustained no operational disruption. Mainland-based HSI agents initially detected suspicious activity and alerted the Honolulu cyber-incident response team, which rapidly intervened. Investigators confirmed the breach originated from an international hacking group attempting to compromise the systems. Immediate containment measures ensured no damage occurred to Hawai’i’s telecommunications networks, and no residual threats remained following the response. The swift action prevented service outages or data loss that could have impacted regional communications.

HSI Honolulu’s investigation identified the responsible threat actors, leading to multiple arrests in connection with the attack. While the agency withheld specific details about the hacking group or compromised company pending further legal proceedings, it confirmed the operation neutralized the immediate risk. Special Agent in Charge John F. Tobon emphasized HSI’s role in disrupting transnational cyber threats, noting the incident exemplified ongoing risks despite Hawai’i’s geographical isolation. The response leveraged HSI’s specialized cyber capabilities to intercept the attackers before they achieved critical infrastructure disruption. No additional system compromises or collateral impacts were reported following the intervention. Tobon reiterated HSI’s commitment to prosecuting threat actors and assisting private-sector victims in such cases.

Sources

Sources available to members: 1 source.