[CLSTR]
< Back to all clusters
[TECHNOLOGY] · United States · 5 sources

started · updated

Part of situation: Rising AI-driven threats to OT and critical infrastructure (31 clusters)

U.S. water infrastructure faces surge in cyberattacks

water infrastructure cyberattack programmable logic controllers critical infrastructure Water Cyber Shield Act

U.S. water and wastewater infrastructure is facing a significant wave of cyberattacks. CISA has reported that over 100 internet-exposed systems have been targeted, primarily through programmable logic controllers (PLCs) used to manage physical machinery. While these intrusions have caused operational disruptions and outages, they have not yet compromised the actual water supply.

One specific breach involved Micro-Comm, a Kansas-based manufacturer of PLCs. The ransomware group Barracuda claimed responsibility for the attack, stating they stole approximately 644 gigabytes of data. While some attacks are attributed to profit-driven groups, U.S. intelligence suggests that Iran may be behind a series of opportunistic attacks on water providers.

In response to these vulnerabilities, Senators Amy Klobuchar and Adam Schiff have introduced the Water Cyber Shield Act. The legislation aims to expand federal oversight by requiring state and locally owned utilities to report cyber incidents. It also proposes $600 million in annual funding to support cybersecurity improvements across the sector.

Entities

CISA · FBI · Iran · Micro-Comm · Siemens

Claims

What the coverage asserts, and how many sources carry each claim.

  • [○ 1 SOURCE] U.S. intelligence believes Iran is likely behind the opportunistic attacks on water providers. techcrunch.com
  • [○ 1 SOURCE] The Barracuda group claimed to have stolen nearly 850,000 files, totaling approximately 644 gigabytes of data from Micro-Comm. offthepress.com
  • [● 2 SOURCES] Hackers have used AI tools to develop scripts for targeting Siemens programmable logic controllers. techcrunch.com · offthepress.com
  • [○ 1 SOURCE] The Water Cyber Shield Act proposes $600 million in annual funding for water and wastewater cybersecurity improvements. esemag.com
  • [○ 1 SOURCE] Micro-Comm, a manufacturer of programmable logic controllers in Olathe, Kansas, confirmed a data breach. offthepress.com
  • [○ 1 SOURCE] CISA observed cyberattacks targeting over 100 internet-exposed systems in the U.S. water and wastewater sector. techcrunch.com
  • [○ 1 SOURCE] The proposed Water Cyber Shield Act would extend federal cyber incident reporting requirements to state and locally owned water systems. esemag.com
  • [○ 1 SOURCE] The ransomware group Barracuda claimed responsibility for the Micro-Comm attack, stating they are profit-motivated and not government-sponsored. offthepress.com

Sources

Hack of water sector supplier draws FBI scrutiny as Iran-linked cyber concerns grow [offthepress.com]
New U. S. bill targets growing cyber threats to water infrastructure [esemag.com]
U. S. Water Systems Are Already Under Cyberattacks. Now A Key Technology Supplier Has Been Hacked Too. [www.ibtimes.com]
CISA warnt: Angriffe auf mehr als 100 Wasseranlagen zielen auf PLCs [www.it-boltwise.de]
CISA confirms hackers targeted over 100 US water systems during July [techcrunch.com]