US cyber agency warns of water system attacks after Minnesota targeted
Key Points:
- The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of a rise in cyberattacks targeting automated control systems (PLCs) of water and wastewater facilities, leading to password changes that lock out operators and force manual operation.
- Over 30 community water systems in Minnesota experienced a “coordinated cyberattack” earlier in the week, prompting boil water notices and investigations by US authorities.
- Preliminary investigations are exploring a possible link to Iran amid ongoing US-Israel tensions, though CISA has not confirmed this attribution and the assessment remains subject to change.
- Minnesota IT Services confirmed malicious activity affecting system technology but noted not all communities experienced service disruptions, and federal agencies are analyzing the broader national implications.
- The US has over 152,000 public drinking water systems and 16,000 wastewater treatment systems, many of which remain vulnerable to cyber threats, prompting heightened warnings from CISA.