Terrorist Group Claims Responsibility for Fatal Chlorine Release

This morning the Federal Bureau of Inquiry confirmed that the technical details in yesterday’s message from Students for Immediate Neutralization of Chlorine Technology and Energy Reversion (SFINCTER) matched the computer attack that lead to the fatal release of chlorine gas from Bleichen Chemical in Delano, GA earlier this week. The message had been sent from the Bleichen email server to major television news services.

Johnathan Quest, an FBI spokesman, noted that the agency did not think that the message indicated an insider attack as there was ample evidence available on the Bleichen Chemical networks of a widespread hack and long-term presence on that system.

The email provided details on the WiFi-vulnerability that SFINCTER exploited in its attack. The SicherheitsKontrolle safety system from Robotron does include a Wi-Fi module, explained Erich Mielke, a Robotron spokesman, but it is only used for sending alarm messages. Robotron is looking into the vulnerability. Mielke explained that the WiFi system was used so that there was no direct connection between the safety system and any other control systems, preventing simultaneous attacks on both systems.

Immanuel C. Securitage confirmed that while there were indications of compromise on the Robotron control system used at the facility, it was not used in the fatal attack.

Vera Arbeiten from the Chemical Safety Bureau explained that the release occurred during a routine maintenance operation on the pressure relief valve on the 80,000-gallon chlorine storage tank, one of three at the facility. Bleichen used an automated valve, locally controlled by the Robotron safety system to close and lockout the manual valve between the tank and the pressure relief valve. The automated system was used instead of a manual valve to provide safety interlocks with other devices associated with that tank to help prevent accidental over-pressurization during the maintenance operation. The WiFi system was used to provide SMS messages to operators and management as part of the facility’s management of change process. The automated lockout process had been approved by the Federal Work Environment Safety Administration (WESA) and is in use at all of the Bleichen sites.

The release occurred when the lockout valve was remotely opened while the pressure relief valve was disconnected from the tank. It appeared, Arbeiten explained, that the maintenance worker, Jessie Owens, was killed when the 100-psi release hit her in the face. While she was wearing all required personal protective equipment, the force of the chlorine gas stream knocked her off the top of the tank. It is not clear whether her broken neck was the result of the fall or the impact of the gas stream. Two other employees were killed by chlorine gas exposure and two Delano police officers were killed by the gas while notifying local businesses and residents about the release. One hundred people were treated at local hospitals for exposure, ten remain in hospitals in critical condition.

Bleichen chemicals was started in 2006 to provide water treatment facilities with a local source of bleach to substitute for the use of chlorine in drinking water disinfection. Bleichen facilities receive chlorine in railcars, chemically convert it to bleach and then ship the industrial strength bleach to water treatment facilities by truck. Last year Bleichen reported corporate profits of $1.2 billion dollars.