Lax oversight on usernames and passwords that are handedout to third parties, including employees of contractors or other people who needeasy and full access to drilling data, opens up clear paths for would-becyber-thieves to wreak havoc, according to Kevin Wagner, global energy directorof cyber-security firm Covisint.

Wagner says that up to 78% of the people working at awell site at any given time are not the employees of the operator.