Iran-linked cyberattacks strike water utilities across seven US states
Developed over time first seen 2 months ago
Cyberattacks on water and wastewater utilities affected at least seven US states, including more than 30 targets in Minnesota, according to the FBI. Iranian-affiliated hackers were considered the leading suspects, and the campaign was among the broadest known attacks on US industrial control systems, raising concerns about the resilience of essential water services.
The FBI did not identify the affected states or quantify damage, but said it and the Environmental Protection Agency were assisting utilities. The Cybersecurity and Infrastructure Security Agency said some incidents disabled digital controls and resulted in boil-water notices, indicating potential contamination risks; it urged operators to remove internet-connected programmable logic controllers, use strong passwords and restrict connections to authorised devices.
- Water utilities in at least seven states were targeted.
- Iranian-linked hackers were the leading suspects.
- Some attacks prompted boil-water notices.
New here? Start with this
Water utilities use computer systems to monitor treatment plants, pumps, storage tanks and the pipes that carry drinking water to homes and businesses. Some of these systems include industrial controls connected to networks, which can make them vulnerable if security is weak or access is not tightly limited.
The FBI is the main federal law-enforcement agency in the United States, while the Environmental Protection Agency oversees drinking-water standards and the Cybersecurity and Infrastructure Security Agency helps protect critical services from digital threats. An Iran-linked hacking group means investigators suspect people connected to, or acting in support of, Iranian interests, though proving responsibility for cyberattacks can be difficult.
Water supply is classed as critical infrastructure because interruptions or concerns about water quality can quickly affect large communities. If treatment or monitoring controls are disrupted, utilities may need to issue boil-water notices while they check that supplies are safe.
More coverage
Cybersecurity Europe Middle East Technology World
Read the full article at the source →
Originally published by Wired as “7 States’ Water Systems Hit by Cyberattacks Likely Tied to Iran”.