Why would anyone want to hack an observatory? This question came to NOIRLab’s IT professionals after someone tried to hack Gemini North’s computer systems in Hawaii. The cyber breach and the ongoing investigation by NOIRLab and the National Science Foundation have impacted surveillance and operations in Hawaii and Chile.

The lab “discovered a cyber event in its computer systems,” according to a multiple August 1, 2023 statement from NOIRLab, the parent agency of the Gemini International Observatory. This halted astronomical observations as IT teams worked to prevent damage to the observatory. This came just a few months after Gemini North returned to service after a lengthy repair and refurbishment project.

The Observatory decided to isolate Gemini’s computer systems; this also means that access to Gemini’s facilities and website is unavailable. Authorities immediately secured the Gemini North telescope and hid the massive instrument. Its Chilean counterpart has already failed due to maintenance. NOIRLab and NSF teams are currently analyzing the intrusion and working to restore full functioning. As of August 24, many facilities remained closed, including Gemini North and South.

Observatories are closing

The shutdown also affects some small telescopes on Cerro Tololo in Chile. These include a medium-sized network of observatories and the Southern Astrophysical Research Telescope. Employees at the scene immediately “insured” both objects. In the meantime, Gemini.edu will remain down, but information about it will continue to be available on NOIRLab.

NOIRLab’s latest update states: “Like the entire astronomy community, we are disappointed that some of our telescopes are not currently observing. Fortunately, we were able to keep some telescopes online and collect data using personal passes.”

Cyber ​​security experts continue to work to restore the normal functioning of all facilities. Many NOIRLab observatories (such as Kitt Peak National Observatory) continue to operate. Crews hope to resume operations in Hawaii and Chile soon.

The lab did not provide any specific information about what happened or what steps they took to reduce the disruptions. The last statement included the following statements: “However, as our investigation into this incident continues, what we can share regarding our cyber security controls and investigation results is limited. In keeping with our commitment to transparency and the security of our infrastructure, we plan to provide as much information to the community as we can.”

Hackers can affect surveillance

The shutdown could affect the telescope’s lifetime observation recommendations from February 2024. The lab is working to launch a call for proposals. However, this could take up to a week as the investigation into the hack continues. More information will be available after the end of August. Source