Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [QUIET] · [TECHNOLOGY]
2 clusters · 6 sources · 6 days · First seen · Last updated
Cyberattacks on US water infrastructure
Overview
United States critical infrastructure, specifically water and wastewater systems, is facing increasing cyber threats from foreign-backed actors. In Colorado, foreign actors breached two small private water utilities, altering equipment settings, changing pumping cycles, and disabling alarms. While these specific intrusions did not impact water quality or public safety, officials noted the incident aligns with efforts by Iranian-backed groups to target such systems.
Broadening the scope, the Cybersecurity and Infrastructure Security Agency has issued advisories regarding an “active threat” targeting Siemens S7 series programmable logic controllers used in sewage and water management. Challenges to defending these systems include insufficient budgets for state and local governments to implement necessary digital defenses. Previous incidents, such as a 2024 breach by Russian-affiliated actors in Texas that caused a water tank to overflow, highlight the ongoing vulnerability of these industrial control systems.
Entities
Cybersecurity and Infrastructure Security Agency · FBI · Environmental Protection Agency · Siemens · United States
Timeline
-
[TECHNOLOGY] 3 sourcesUS critical infrastructure faces rising cyber threats to water systems
U.S. state and local governments face rising cyber threats to critical infrastructure like water systems. Experts suggest leveraging tax policy to help underfunded entities afford essential cybersecurity tools.
-
[TECHNOLOGY] 3 sourcesColorado water utilities targeted by foreign cyberattack
Foreign hackers breached two small Colorado water utilities, altering equipment settings and disabling alarms. Officials report no impact on water quality or public safety.
Sources
cybernoz.com · cyberscoop.com · deseret.com · europesays.com · krdo.com · thebeltwayreport.com