Sweeping cyberattack on water systems in multiple states has US officials on edge
Key Points:
- Hackers have launched a coordinated cyberattack targeting water systems in multiple US states, causing some utilities to issue boil-water notices and switch to manual operations, though no contamination has been reported.
- The US Cybersecurity and Infrastructure Security Agency (CISA), FBI, and EPA are actively working to secure affected water facilities, with Iran suspected but not formally accused of involvement.
- The attackers exploited vulnerable internet-facing programmable logic controllers (PLCs) that control critical water system functions like pressure and chemical dosing.
- At least six states, including Minnesota and Wisconsin, have reported related cyber incidents, highlighting longstanding cybersecurity weaknesses in the water sector.
- Experts warn that the increasing connectivity of water infrastructure demands stronger cybersecurity measures, as attacks on water systems pose significant risks to public health and safety.