NATIONAL MARITIME CYBERSECURITY PLAN private sector companies to gain intelligence and position themselves for future cyber operations. Iran continues to set the conditions for cyber-attacks against the United States and its allies. It is capable of causing localized, temporary disruptive effects - such as disrupting a large company’s corporate networks for days to weeks similar to its data deletion attacks against dozens of Saudi governmental and private-sector networks in late 2016 and early 2017.” 52 Furthermore, Iran frequently targets OT systems, often the same used in maritime applications. As early as 2012, Iran demonstrated a willingness to target maritime activities by breaching United States Navy unclassified networks. 53 The Democratic People’s Republic of North Korea (DPRK) is a significant cyber threat to companies and institutions with significant financial and material resources. Its goal is largely to generate needed revenue to support its ailing economy. “Pyongyang’s cybercrime operations include attempts to steal more than $1.1 billion from financial institutions across the world including a successful cyber heist of an estimated $81 million from the New York Federal Reserve account.” 54 55 The DPRK, however, has demonstrated a willingness and ability to target maritime activities by manipulating multiple RF signals, most notably with South Korea accusing North Korea of spoofing automatic identification systems to evade sanctions. 56 57 Attributable or not, the frequency and magnitude of malicious cyber activities affecting the maritime domain and the maritime subsector continues to increase by State and non-State actors. Since 2015, hundreds of small cyber operations compromised of hundreds of gigabytes of maritime-related logistics data and targeted USTRANSCOM subordinate elements. Compromise of this type and size of data provides malicious actors insight into United States strategic mobility plans to deploy military equipment and forces for national defense or foreign humanitarian assistance. In 2018, the United States Navy suffered a breach and theft of significant amounts of data related to United States submarines. The breach revealed Iran’s intent of identifying vulnerabilities and gaining technological insight on United States warships. 58 In 2018, the ports of San Diego, California, and Barcelona, Spain, suffered cyber-attacks. The likely objectives of the cyber-attacks were to cause maritime supply chain disruptions to generate economic losses. 52 Director National Intelligence (DNI), Worldwide Threat Assessment: Statement for the Record of the United States Intelligence Community, Dan Coats, (Washington D.C.: 29-January-2019), 5-9. 53 FireEye, Operation Saffron Rose, 2013, https://www.fireeye.com/content/dam/fireeye-www/global/en/currentthreats/pdfs/rpt-operation-saffron-rose.pdf. 54 Director National Intelligence (DNI), Worldwide Threat Assessment: Statement for the Record of the United States Intelligence Community, Dan Coats, (Washington D.C.: 29-January-2019), 5-9. 55 Morello and Nakashima, The Washington Post, United States imposes sanctions on North Korean hackers accused in Sony attack, dozens of other incidents, https://webcache.googleusercontent.com/search?q=cache:eSIweQuaBEJ:https://www.washingtonpost.com/national-security/us-sanctions-north-korean-hackers-accused-in-sony-attackdozens-of-other-incidents/2019/09/13/ac6b0070-d633-11e9-9610fb56c5522e1c_story.html+&cd=2&hl=en&ct=clnk&gl=us, Retrieved July 20, 2020. 56 FireEye, Operation Saffron Rose, 2013, https://www.fireeye.com/content/dam/fireeye-www/global/en/currentthreats/pdfs/rpt-operation-saffron-rose.pdf. 57 NK News, North Korean vessels exploiting tracking system flaws to evade sanctions: report, August 11, 2020, https://www.nknews.org/2019/06/north-korean-vessels-exploiting-tracking-system-flaws-to-evade-sanctions-report/ 58 Center for Strategic and International Studies (CSIS), Significant Cyber Events since 2006, (Washington D.C.: May 2020). A-13