Hackers Intensify Attacks on U.S. Water Utilities
Over the past year and a half, U.S. water utilities have faced a surge of cyberattacks from cybercriminals, hacktivists, and nation-state actors. Notably, pro-Iranian hackers infiltrated a Pittsburgh-area water utility's programmable logic controller (PLC), defacing its touchscreen with anti-Israel messages and forcing a switch to manual operations. Additionally, a major water operator serving 500 North American communities disconnected its IT and OT networks after ransomware compromised backend systems and exposed customer data. The largest regulated U.S. water utility also experienced outages in customer-facing websites and telecommunications following an October cyberattack.
These incidents have prompted warnings and security guidelines from agencies like the Cybersecurity and Infrastructure Security Agency (CISA), the Environmental Protection Agency (EPA), and the FBI. The attacks primarily targeted smaller utilities lacking robust security measures, though larger entities were also affected, mainly in their IT systems without disrupting water services. Experts emphasize the need for enhanced cybersecurity across the sector to protect critical infrastructure and maintain public confidence.Efforts are underway to bolster defenses, particularly for smaller utilities with limited resources. Larger utilities have been progressively improving their operational technology (OT) security, with some initiating measures as early as 2000. The recent wave of attacks underscores the urgency for comprehensive cybersecurity strategies to safeguard water systems against evolving threats.
Higgins, K. J. (2024, December 27). Hackers Are Hot for Water Utilities. Dark Reading. https://www.darkreading.com/ics-ot-security/hackers-hot-water-utilities
#Cybersecurity #Water #Infrastructure #Hackers #Utilities
Comments
Post a Comment