Hackers Intensify Attacks on U.S. Water Utilities
Over the past year and a half, U.S. water utilities have faced a surge of cyberattacks from cybercriminals, hacktivists, and nation-state actors. Notably, pro-Iranian hackers infiltrated a Pittsburgh-area water utility's programmable logic controller (PLC), defacing its touchscreen with anti-Israel messages and forcing a switch to manual operations. Additionally, a major water operator serving 500 North American communities disconnected its IT and OT networks after ransomware compromised backend systems and exposed customer data. The largest regulated U.S. water utility also experienced outages in customer-facing websites and telecommunications following an October cyberattack. These incidents have prompted warnings and security guidelines from agencies like the Cybersecurity and Infrastructure Security Agency (CISA), the Environmental Protection Agency (EPA), and the FBI. The attacks primarily targeted smaller utilities lacking robust security measures, though larger entities wer...