Khouzestan Steel Company

Khouzestan Steel Company, also known by its Persian name شرکت فولاد خوزستان, is engaged in the production of steel products. The company’s headquarters is located in Canada, as indicated in the organisational context. It is described as an Iranian state‑owned entity that operates under international sanctions. Being state‑owned ties its strategic direction to Iranian governmental policies, while the sanctions regime limits its access to certain foreign technologies and markets. These factors shape its operational environment and influence its approach to industrial activities.

In June 2022, the company suffered a cyberattack that forced a halt to its production processes, an event claimed by the Gonjeshke Darande hacking group. The attackers released video footage showing disrupted machinery and images of compromised human‑machine interfaces and network diagrams, and they also breached the plant’s closed‑circuit television system to monitor the physical effects of their intrusion. Analysts noted that the exact intrusion vector remained unidentified but highlighted typical operational technology weaknesses such as insufficient network segmentation, outdated software, and the absence of intrusion detection systems that could have facilitated lateral movement within the network. A further incident is recorded for 1 June 2024, although no public details of that event have been provided in the available sources. Together, these episodes illustrate how cyber threats can impact steel manufacturing operations and underscore the importance of strengthening OT security measures.