NJOHSP Participates in Full-Scale Operation ‘NJ CONECT’ Railway Safety Exercise; NJOHSP Director Testifies Before Assembly Budget Committee; New Jersey Launches State and Local Cybersecurity Grant Program; Russian National Charged with Cyberattacks on US Critical Infrastructure

The New Jersey Office of Homeland Security and Preparedness joined Amtrak, NJ TRANSIT, the New Jersey State Police, the New Jersey Department of Transportation, the Port Authority of New York and New Jersey, the Federal Air Marshal Service, as well as numerous local law enforcement partners, along the Northeast Corridor May 17 for Amtrak’s railway safety full-scale exercise Operation “NJ CONECT.” The New Jersey Coordinated Operations Northeast Corridor Train joint exercise promotes collaboration between law enforcement and transportation personnel to improve overall response capabilities and build upon public trust. “Operation NJ CONECT will bolster our security preparedness efforts by leveraging the strengths of our law enforcement and transit partners in a collaborative effort,” said Governor Murphy. “As the most densely populated state in the nation, it’s critical that we engage in a proactive, cross-sector approach to ensuring the utmost safety of our residents. This exercise will send a message to New Jersey’s commuters that their security and peace of mind remain our top priorities.” The exercise included increased platform and aviation patrols, explosive detection sweeps by canine units, elevated security on trains and a visible and proactive law enforcement presence along the corridor. “The Northeast Corridor is one of the foremost railways between major metropolitan areas for commuters, travelers and supply chains, making it an attractive target for nefarious actors and a top-tier priority for those of us looking to stop them in their efforts,” said NJOHSP Director Laurie Doran. “While much of our daily operations are conducted outside the public’s view, this exercise will allow us to showcase that work, enhance communication among our law enforcement counterparts, send a clear message to potential threat actors and give ridership greater peace of mind.” Responders carried out the exercise on platforms and train cars spanning from Newark Penn Station and Secaucus Junction Station to Metropark Station in the Iselin section of Woodbridge and the Trenton Station. Read the full press release on njohsp.gov.

New Jersey Office of Homeland Security and Preparedness Director Laurie Doran, in support of New Jersey Attorney General Matthew Platkin, testified May 15 before the NJ Assembly Budget Committee’s Law and Public Safety hearing, where she reported on cybersecurity initiatives and faith-based outreach efforts. Director Doran said the cybersecurity threat to New Jersey remains high according to NJOHSP’s 2023 Threat Assessment due to geopolitical unrest and evolving cyber tactics and techniques. Director Doran, who noted that “cybersecurity has no borders,” said NJOHSP provides companies and individuals with best cyber practices to educate and raise awareness. She added that the agency’s New Jersey Cybersecurity and Communications Integration Cell also collaborates with its partners to provide risk mitigation strategies and response services. Regarding funding for cybersecurity initiatives, Director Doran said, “We’re good stewards of our money. We receive less than $9 million per year and are not asking for any particular funding…We want to make sure that any funding we receive is not being used frivolously on one-year projects, but on those that are longer-lasting.” Director Doran concluded her testimony by highlighting NJOHSP’s Interfaith Advisory Council and efforts to keep members informed by providing accurate and relevant information through email and social media.

The State and Local Cybersecurity Grant Program is a federal grant program administered by the U.S. Department of Homeland Security and funded by the Infrastructure Investment and Jobs Act. SLCGP’s goal is to improve the cybersecurity posture of state, local and territorial government organizations by providing assistance for managing and reducing systemic cyber risk. The New Jersey SLCGP Planning Committee, DHS and FEMA approved four first-year projects with SLCGP funding. The projects address cybersecurity governance and planning, cybersecurity risk management, enhancing cybersecurity resilience and workforce development. To ensure as many New Jersey entities as possible can benefit from the limited SLCGP funds, the New Jersey Cybersecurity and Communications Integration Cell will procure software, hardware and services with the funding and provide those resources to state and local government entities. Visit the NJCCIC’s NJ SLCGP web page for more information regarding the plan, the federal fiscal year 2022 approved projects and the application process. To participate, State and local government organizations must complete and submit a local consent agreement and NJ SLCGP resource request application by June 9, 2023.

The U.S. Department of Justice announced May 16 it unsealed two indictments charging a Russian national and resident with using three different ransomware variants to attack numerous victims throughout the U.S., including law enforcement agencies in New Jersey and Washington, D.C., as well as victims in other government agencies, hospitals and schools. One indictment, obtained in New Jersey, alleges Mikhail Pavlovich Matveev, who uses aliases Wazawaka, m1x, Boriselcin and Uhodiransomwar, and other perpetrators conspired to deploy three ransomware variants known as LockBit, Babuk and Hive since at least 2020 and demanded ransom payments in connection with each. According to the accusation, Matveev and his LockBit coconspirators purportedly deployed LockBit against a law enforcement agency in Passaic County, New Jersey, in June 2020 and May 2022, Matveev and his coconspirators allegedly deployed Hive against a nonprofit behavioral healthcare organization headquartered in Mercer County, New Jersey. A second indictment, obtained in the District of Columbia, claims Matveev conspired to deploy Babuk to transmit a ransom demand. Matveev and his accomplices demanded a total of nearly $400 million during the three ransomware campaigns while total victim ransom payments amounted to as much as $200 million.