Only a few weeks ago, Trinidad and Tobago was consumed with fear over possible identity theft, fraud, extortion and other types of nefarious activity, after it was learnt that the Telecommunication Services of Trinidad and Tobago (TSTT) had been the victim of a massive cyberattack.
After all, the entity which claimed responsibility, RansomExx, is purported to be one of some repute. Added to this was the fact that it dumped the stolen 6GB of TSTT data, which contained a reported 1.2 million entries, on the dark web, where it could be further accessed by individuals with a propensity for activity of a deeper criminal nature.
The fallout from the incident was, needless to say, massive, with Prime Minister Dr Keith Rowley, who had some personal information leaked in the breach, labelling it a national security concern.
Former CEO Lisa Agard, after a belated public apology, ultimately lost her job for the manner in which the company mishandled the incident.
In the early stages of the fiasco, Minister of Public Utilities Marvin Gonzales, under whose purview the state-owned company resides, promised to ensure proper support would be provided for TSTT to probe how the hackers so easily accessed the country’s main telecoms provider’s system. In fact, at the time, he bandied the Trinidad and Tobago Police Service (TTPS), a Joint Select Committee of Parliament or a forensic probe as options for the analysis of how TSTT was so easily opened to such an attack.
It is, therefore, quite disconcerting that Minister Gonzales is now telling citizens that the substantial external probe into the October 9 incident is not only yet to get off the ground, but that the company tasked to do so will not be on board before two to three weeks, and that completion of this major probe is also another few months off.
Furthermore, the fact that TSTT itself is still undertaking its internal probe of the incident over a month later, even with assistance from a foreign team, suggests a lack of urgency in getting to the bottom of the matter.
Indeed, with the Christmas season now upon us, and the propensity of state agencies to slow down operations during the end of the year, to be followed by the Carnival season, citizens could be excused if they feel this matter will not be dispensed with before the middle of next year.
And so, this newspaper asks the critical question now of whether TSTT and the Minister are fully committed to accounting to the public for this sordid affair.
At a time when conversations abound about expenditure into commissions of enquiries while not benefitting fully from such activities, we urge Minister Gonzales to get TSTT to fast track this activity.
Let’s not forget, after all, that the cyberattackers work 24/7 looking for new and lucrative targets. Now that TSTT has proven to be a soft target for them, they will turn their attention to other local entities, where, of course, they have already had some success in the past.
With uncertainty regarding the privacy of the customers affected in the attack still an issue, we call on Minister Gonzales to light a hotter fire under new interim TSTT CEO Kent Western in this matter. Too much is at stake given TSTT’s dominance of the telecoms landscape.