Colorado water utilities targeted by foreign cyberattack

Foreign actors breached the computer systems of two small, private water utilities in Colorado last month. The intrusions involved altering equipment settings, changing pumping cycles, and disabling alarms and remote access.

Governor Jared Polis’ office stated that the affected systems serve a combined total of fewer than 400 people. Officials confirmed that the breaches did not impact water quality, treatment processes, or public safety. The providers identified the issues in late August and took prompt action to regain control and secure the systems.

While the specific identity of the hackers has not been confirmed, the governor’s office noted awareness of ongoing efforts by Iranian-backed groups to target drinking water and wastewater systems nationwide, citing information from the Cybersecurity and Infrastructure Security Agency. These incidents follow a broader trend of cyberattacks on critical infrastructure; the EPA has reported that more than 100 water and wastewater systems across 12 states have been targeted this year.