Over 100 US Water Systems Hit by Cyberattacks in July
Iran-linked hackers targeted rural water facilities through exposed industrial control systems.
1Attack scale
The Cybersecurity and Infrastructure Security Agency (CISA) revealed that more than 100 US water and wastewater systems were compromised in July. Attacks primarily exploited programmable logic controllers (PLCs) connected to cellular modems. This marks the first time federal authorities have quantified such digital intrusions.
2Targeted regions
The cyberattacks impacted rural utilities across at least 12 states, with small-scale facilities in Minnesota, Michigan, Georgia, South Dakota, and New Jersey particularly vulnerable. Officials confirmed most breaches leveraged security flaws in internet-exposed PLCs.
3Expert analysis
Matt Hartman, CSO at Merlin Group, stated "This is very serious. What stands out isn't any single incident - it's the scale." He emphasized that hitting over 100 systems in one month indicates sector-wide vulnerabilities. Much infrastructure was designed for closed environments without internet accessibility considerations.
4Potential threat
Viakoo VP John Gallagher noted that while 100 systems represent just 0.5% of US water utilities, the real danger lies in these being test runs for larger attacks. Gallagher stressed the urgent need for enhanced critical infrastructure security measures.
5Recent developments
Five federal agencies recently warned that attackers are using AI-generated exploitation scripts to breach Siemens S7 Series PLCs at water, manufacturing and energy facilities. Halcyon Research's Cynthia Kaiser suggested this continues suspected Iran-linked activities.
6OT security risks
Former FBI official Kaiser explained Iran-affiliated actors are broadly targeting PLCs that underpin societal health, safety and critical infrastructure. She highlighted how such operational technology targeting poses serious national security threats.
7Recommended actions
CISA advises organizations to remove PLCs from public internet access, route remote connections through VPNs/gateways, change default passwords, implement strong authentication, and restrict access to allowlisted IP addresses from trusted OT networks.
8Sector implications
Experts warn these water infrastructure attacks set alarming precedents for global critical infrastructure security. There's consensus that small-to-midsize utilities must increase cybersecurity investments, particularly around industrial control systems.
Original article: Slashdot — ABD'de 100'den Fazla Su Sistemine Siber Saldırı