US Cyber Agency Issues Warning About Increasing Attacks on Water Systems Following Minnesota Incident
The US cyber agency has issued a warning that hackers are increasingly focusing on water systems, following coordinated attacks that have disrupted operations in several Minnesota communities.
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding an increasing number of cyberattacks aimed at the nation’s water and wastewater systems, following a coordinated incident that impacted numerous community water facilities in Minnesota.
According to CISA, there is a growing trend of attackers focusing on programmable logic controllers (PLCs), which are the automated devices responsible for managing essential water infrastructure. In multiple instances, hackers altered system passwords, hindering operators from accessing equipment and compelling certain facilities to revert to manual operations while issuing boil water advisories.
The warning comes in light of reports from Minnesota’s state IT agency indicating that over 30 community water systems were subjected to a coordinated cyberattack earlier this week. The incidents are said to have taken place on July 26 and 27, involving unauthorized access to systems utilized for remote monitoring and operational control.
State officials confirmed that investigators have identified malicious activity impacting industrial control technology; however, they noted that not all communities faced disruptions to water services.
Minnesota Chief Information Security Officer John Israel stated that pertinent information has been communicated to federal authorities, who are spearheading the investigation to ascertain if the attacks can be associated with a particular threat actor.
US investigators are reportedly looking into potential connections to Iran regarding the incident, though officials emphasize that the investigation is still in its early stages and no definitive attribution has been established. CISA chose not to provide any comments on the reports concerning Iran’s potential involvement.
The warning arises in the context of increased geopolitical tensions in the Middle East and follows earlier federal advisories regarding cyber threats aimed at critical infrastructure.
The United States manages around 152,000 public drinking water systems and over 16,000 wastewater treatment facilities, a significant number of which depend on internet-connected industrial control systems that experts warn are still susceptible to cyberattacks.
Earlier this year, CISA issued a warning that Iranian-linked hacking groups were focusing on internet-connected operational technology, including PLCs produced by Rockwell Automation. The agency subsequently broadened its advisory to encompass comparable devices made by other manufacturers, encouraging operators to enhance cybersecurity measures throughout critical infrastructure.
