Home / Technology / US Water Systems Under Cyber Siege
US Water Systems Under Cyber Siege
1 Aug
Summary
- US water systems face escalating cyberattacks targeting operations.
- Hackers exploit specific industrial control systems for disruption.
- Attacks could allow untreated groundwater to seep into pipes.
The FBI has issued an alert regarding a significant increase in cyberattacks targeting water and wastewater systems throughout the United States. These incidents, which began earlier this week, have impacted utilities in at least seven states, with some attacks successfully disrupting operations.
Recent coordinated attacks in Minnesota affected over 30 community water systems. The FBI's advisory indicates a broader scope of attempted intrusions nationwide. Hackers are exploiting specific industrial control devices, known as programmable logic controllers (PLCs), particularly Rockwell Automation's MicroLogix 1100 and 1400 series.
These attacks involve altering PLC configurations, such as IP addresses and passwords, which hinders a utility provider's ability to monitor and control its water infrastructure. Reported operational effects include pressure loss and flooding. The FBI and EPA have recommended immediate security enhancements, including isolating PLCs from the internet and enforcing strong password policies.
While state officials investigate the Minnesota breach, they have not yet attributed the activity to a specific actor, though US officials reportedly suspect Iran. This follows prior warnings from the FBI and NSA in April about Iranian hackers targeting similar vulnerable PLCs.
