{"id":61565,"date":"2026-10-17T11:30:00","date_gmt":"2026-10-17T11:30:00","guid":{"rendered":"https:\/\/www.theregister.com\/a\/5303677"},"modified":"2026-10-17T11:30:00","modified_gmt":"2026-10-17T11:30:00","slug":"cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/","title":{"rendered":"Cybercrims go beyond stealing data to attack physical building systems"},"content":{"rendered":"
<\/div>\n

<\/p>\n

Late Sunday night, a still-unknown cybercriminal or group hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores<\/a>, spiking temperatures, spoiling food, and sparking fires. This is part of an ongoing trend of attacking physical systems that can do damage in the real world.<\/p>\n

In August, a ransomware attack disrupted<\/a> building-management systems at a Canadian hospital, affecting door access controls, central HVAC monitoring, and the issuing of staff access cards.<\/p>\n

And three years ago, cyberattacks hit Las Vegas casinos<\/a>, causing slot machines to go dark, preventing payment kiosks and ATMs from spitting out cash, and locking guests out of their rooms when the electronic keys stopped working.<\/p>\n

Not all digital intrusions remain in cyberspace, and attackers don\u2019t need to encrypt files and steal data to cause chaos. Hitting physical systems often produces more severe consequences – and turns up the heat on executives to pay an extortion demand.<\/p>\n

\u201cThere was one gig where the customer was refusing to pay, and so the threat actor was like, \u2018Hold my beer, have fun getting into your offices,\u2019 and locked everybody out,\u201d Tim Beasley, a senior incident response consultant at Semperis, told The Register<\/span>. <\/p>\n

Beasley won\u2019t name the customer, or provide any incriminating information, but said the incident response involved police smashing glass in addition to his team recovering compromised data.<\/p>\n

\u201cThe cops had to break in, and literally get into the building, breaking some windows, so the customer was able to finally get back in,\u201d he said. We asked if the customer paid the ransom demand, and Beasley yelled: \u201cOh, hell, no!\u201d<\/p>\n

A report published earlier this month by ServiceNow\u2019s Armis Labs found increasing evidence of ransomware attackers using physical consequences as leverage in their intrusions. \u201cToday\u2019s BAS operate at the intersection of IT and OT worlds, creating unprecedented exposure,\u201d the report said<\/a>.<\/p>\n

Ransomware with physical consequences<\/h3>\n

Building automation systems – BAS – are the critical systems that control and monitor facilities\u2019 HVAC, lighting, energy usage, and water consumption. They also oversee badge readers, door locks, surveillance cameras, fire alarm control panels, and other physical safety equipment. <\/p>\n

As such, BAS make very attractive targets for ransomware operators looking for high-pressure ways to extort organizations into paying multi-million ransom demands. These systems also appeal to government-backed goons and hacktivists looking to ensure maximum psychological and physical impact during destructive cyberattacks. <\/p>\n

Armis Labs found 73 percent of organizations own BAS that have been used in ransomware attacks, and this same percentage have known exploited vulnerabilities in at least one of their building automation systems. Additionally, 91 percent of BAS communicate over insecure protocols<\/a> – opening up an even bigger attack surface for cyber-miscreants wanting to cause physical harm.<\/p>\n

\u201cThe primary thing that we see with any attack on building management systems or physical systems: It\u2019s a great place for the threat actor to hide,\u201d Michael Freeman, ServiceNow\u2019s senior director of threat research, told The Register<\/span>. \u201cIt’s easier for them to compromise, and it’s easier for them to hide in.\u201d<\/p>\n

BAS and operational technology (OT) in general have fewer security controls than IT systems. Most require continual uptime, which makes them harder to patch or even scan for vulnerabilities and misconfigurations as this may lead to outages. <\/p>\n

\u201cOne case in particular, against a very large financial institution, the threat actors were staying low and quiet by attacking their BMS systems, and then pivoting into the IT environment,\u201d Freeman said.<\/p>\n

The intruders were routinely caught – and booted from – the financial institution\u2019s IT systems, so they built backdoors into the BMS to ensure persistent access to both OT and IT networks.<\/p>\n

\u201cWe’re also seeing threat actors using AI to understand more building automation systems, especially ones that are using obscure OSs like VxWorks, older Unix-type systems,\u201d Freeman said.<\/p>\n

AI has entered the chat<\/h3>\n

As multiple security experts have told us in previous interviews, security through obscurity is dead<\/a>. Not only does AI make it easier<\/a> for attackers to find bugs<\/a> \u2013 some very obscure<\/a> and decades old<\/a> – but it also means criminals no longer need to be OT experts to carry out destructive cyberattacks on critical networks and facilities. Instead, they can use AI to learn all about the obscure protocols and proprietary hardware and software that historically made industrial control systems black boxes.<\/p>\n

\u201cIt\u2019s easier to understand what the controls are,\u201d Freeman said, using the example of an attacker trying to take down a plane, or some similar catastrophic cyberattack.<\/p>\n

Historically, even advanced, government-backed hacking squads would \u201cbe quiet, because you don’t know what changing certain settings is going to do,\u201d Freeman explained. \u201cNow you can use AI to say, \u2018If I compromise a weight and balance system for airlines, all I need to do now is move this number here to this number, and I just told the system to load heavy stuff on the right side of the plane instead of equal distribution.’\u201d<\/p>\n

Freeman told us he has seen attackers break into airlines\u2019 OT gear in the past. \u201cBut they didn\u2019t know what they were getting into, and so they left them alone,\u201d he said. \u201cThose do cause me concern because in the past I’ve helped to kick people out of those types of systems.\u201d<\/p>\n

Industrial orgs increasingly under attack<\/h3>\n

OT security provider Dragos tracks ransomware groups\u2019 claims against industrial organizations on the criminals\u2019 leak sites, along with publicly disclosed intrusions affecting manufacturing and other critical sectors. To be clear: claims on leak sites aren\u2019t always accurate or even true, and the claim itself doesn\u2019t mean operations or control systems were hit.<\/p>\n

Since 2022, however, \u201cthe numbers have been consistently increasing,\u201d Lexie Mooney, senior threat analyst at Dragos, told The Register<\/span>.<\/p>\n

The cybersecurity firm tracked 995 ransomware attacks<\/a> against industrial orgs in 2023, a 49.5 percent increase from 2022. That number j<\/a>umped more than 87 percent in 2024<\/a>. <\/p>\n

Active ransomware groups targeting industrial orgs also grew in 2024 to 80 groups, up from 50 the year before.<\/p>\n

Dragos tracked 119 ransomware groups impacting more than 3,300 industrial organizations<\/a> in 2025, and the incidents have steadily increased every quarter this year: 1,020 incidents<\/a> in the first quarter of 2026 and 1,140 incidents in Q2<\/a>.<\/p>\n

\u201cThe vast majority of cases are opportunistic,\u201d Abdul Alamri, a senior threat analyst at Dragos, told us. \u201cIn some of the cases that we have seen an operational impact, either physical systems or an OT operation, it\u2019s just the nature of the opportunism on the part of those ransomware groups.\u201d<\/p>\n

This is partially due to the complexity of OT systems, he added. \u201cRansomware groups want to disrupt operations, and put pressure on the victims to pay the ransom,\u201d Alamri said. \u201cThey don\u2019t want to invest that time and effort to target complex systems.”<\/p>\n

It\u2019s usually quicker and easier for financially motivated crims to affect operations via IT systems – as the extortionists did in the August 2025 Jaguar Land Rover (JLR) breach<\/a>, which halted manufacturing and crippled business operations<\/a> for months. <\/p>\n

Internet-connected OT: the next ‘low-hanging fruit’<\/h3>\n

The other side of this complexity, however, is that many organizations themselves still lack visibility into their OT environments. <\/p>\n

Dragos estimates that fewer than 10 percent of OT networks worldwide<\/a> currently have sufficient network monitoring in place. Plus, in 30 percent of incidents the security firm responded to in 2025, the investigations did not begin with a detection alert, but with someone noticing that \u201csomething seemed wrong\u201d in operations. <\/p>\n

This lack of visibility, combined with threats from AI<\/a>, worries Alamri. \u201cIf you compare the risk that we have seen from humans, to what we are about to face in the near future with AI agents who might continuously try to break into those systems – it\u2019s a pretty dark future if we don’t take the right measures to protect ourselves against it.\u201d <\/p>\n

As organizations get better at patching and securing IT systems, attackers will likely look to internet-connected OT systems where digital compromises have real-world consequences, according to Matt Hayden, VP of cyber and emerging threats at General Dynamics Information Technology.<\/p>\n

\u201cWe all anticipate that as we get better at reducing the IT low-hanging fruit, OT will become a vector of much more scrutiny and much more attention,\u201d Hayden told The Register<\/span>. <\/p>\n

Before joining GDIT, Hayden served as the assistant secretary for cyber, infrastructure, risk and resilience policy at the US Department of Homeland Security.<\/p>\n

Compliance vs. security<\/h3>\n

\u201cThere is a big focus on the hardware being connected for the purpose of compliance – and to make sure that, in the name of compliance, we aren’t opening back doors, to devices that traditionally wouldn’t have to be connected to facilitate their service,\u201d he said, using refrigeration units as an example of one such system that is now internet-connected for compliance purposes.<\/p>\n

This was prior to the French supermarket hacks.<\/p>\n

Refrigeration units\u2019 monitoring systems connect to the internet so their owners and operators can prove to regulators that the units maintain their uptime and temperature in accordance with regulations.<\/p>\n

\u201cSo if the health department comes by, they say, \u2018Look, my refrigerator was at 27 degrees for the last 72 days,’ and they have a check mark, and they get their A plus. But that simple connectivity is also a vector in which that particular refrigerant unit could be targeted for disruption,\u201d Hayden said.<\/p>\n

About a week after our interview, criminals did exactly that.<\/p>\n

\u201cThe recently reported exploitations of commercial refrigeration units represent a significant example of devices without digital value, no sensitive data or extended enterprise access, being exploited by being connected to the internet with unpatched firmware,\u201d Hayden told us in a subsequent email. <\/p>\n

He said he expects the attribution to be \u201cless nation-state, and more likely those looking for targets of opportunity to identify what could be done with the unpatched systems.\u201d<\/p>\n

\u201cThe consequences are food supply degradation at a small scale, but it is an important example of what could happen at scale very quickly with more consequential operating equipment,\u201d Hayden said.\u00ae<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

‘Hold my beer, have fun getting into your offices’ READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":61566,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[307],"class_list":["post-61565","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register","tag-security"],"yoast_head":"\nCybercrims go beyond stealing data to attack physical building systems 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cybercrims go beyond stealing data to attack physical building systems 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-17T11:30:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/image.theregister.com\/5303687.jpg?imageId=5303687&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Cybercrims go beyond stealing data to attack physical building systems\",\"datePublished\":\"2026-10-17T11:30:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/\"},\"wordCount\":1679,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems.jpg\",\"keywords\":[\"Security\"],\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/\",\"name\":\"Cybercrims go beyond stealing data to attack physical building systems 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems.jpg\",\"datePublished\":\"2026-10-17T11:30:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems.jpg\",\"width\":100,\"height\":56},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Cybercrims go beyond stealing data to attack physical building systems\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cybercrims go beyond stealing data to attack physical building systems 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/","og_locale":"en_US","og_type":"article","og_title":"Cybercrims go beyond stealing data to attack physical building systems 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2026-10-17T11:30:00+00:00","og_image":[{"url":"https:\/\/image.theregister.com\/5303687.jpg?imageId=5303687&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Cybercrims go beyond stealing data to attack physical building systems","datePublished":"2026-10-17T11:30:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/"},"wordCount":1679,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/10\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems.jpg","keywords":["Security"],"articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/","url":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/","name":"Cybercrims go beyond stealing data to attack physical building systems 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/10\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems.jpg","datePublished":"2026-10-17T11:30:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/10\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/10\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems.jpg","width":100,"height":56},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.threatshub.org\/blog\/tag\/security\/"},{"@type":"ListItem","position":3,"name":"Cybercrims go beyond stealing data to attack physical building systems"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=61565"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61565\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/61566"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=61565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=61565"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=61565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}