Source: Fox News
Summary
Foreign hackers targeted two Colorado water utilities, altering pumping cycles, disabling alarms, and changing equipment settings before operators regained control. The incidents did not affect drinking water quality, according to Colorado Gov. Jared Polis’ office. The attacks add Colorado to a growing list of U.S. states affected by cyber intrusions in water and wastewater systems. The Environmental Protection Agency reported over 100 attacks on water systems in 12 states this year. Colorado officials have not identified the attackers or linked the breaches to other incidents. The affected systems serve about 400 people. Federal authorities warned of cyber threats targeting operational technology in water plants.
Our Reading
As expected, the matter has reached another stage.
Hackers changed pumping cycles and disabled alarms at two water utilities.
Officials said no drinking water was affected.
More than 100 water systems in 12 states have been attacked this year.
Operators regained control quickly, but the pattern feels familiar.
Author: Evan Null
Foreign Hacks Target Colorado Water Systems
Foreign actors hacked two Colorado water utilities last month, altering pumping cycles, disabling alarms, and changing equipment settings. State officials said the intrusions did not affect drinking water quality or treatment processes. The incidents add Colorado to a growing list of U.S. states affected by cyberattacks on water and wastewater infrastructure. The Environmental Protection Agency reported over 100 attacks on water systems in 12 states this year. Colorado officials have not identified the attackers or linked the breaches to other incidents. The affected systems serve about 400 people.
Cyber Threats Expand Across U.S. Water Infrastructure
High-profile cyberattacks have targeted more than 100 drinking water and wastewater systems across 12 states this year, according to the Environmental Protection Agency. The breaches highlight a growing threat to U.S. water infrastructure. Federal authorities warned this summer that malicious cyber actors were targeting internet-connected operational technology at water and wastewater utilities. The FBI and EPA said utilities in at least seven states had reported incidents, some of which degraded water operations. The attacks show how hackers can access physical equipment through operational technology.
Colorado Officials Address Cyber Intrusions
Colorado officials have not identified the actors behind the intrusions of the two small systems or said whether they are connected to the broader activity reported elsewhere in the country. “These were brief incidents, and the risks were quickly addressed by the providers themselves, who subsequently alerted the state,” said Polis spokeswoman Eric Maruyama. The hackers altered equipment settings, disabled remote access and alarms, and changed pumping cycles, according to the governor’s office. The water utility systems that were impacted provide drinking water to approximately 400 people.
Federal Warnings and Cybersecurity Measures
Federal authorities warned in July that malicious cyber actors were targeting internet-connected operational technology at water and wastewater utilities. At the time, the FBI and EPA said utilities in at least seven states had reported incidents, some of which degraded water operations. The agencies said attackers had remotely accessed internet-facing programmable logic controllers, or PLCs, and tampered with device configurations, in some cases causing utilities to lose monitoring or control capabilities. Reported operational effects included loss of water pressure and flooding.
Recent Attacks and Political Responses
The Colorado breaches follow a series of attacks on water systems across the country this summer, including cyber activity affecting more than 30 community water systems in Minnesota. Federal investigators have examined whether Iranian actors or hackers affiliated with Iran were responsible for the Minnesota attacks, though officials had not publicly attributed the activity at the time. President Donald Trump disputed suggestions that Iran was behind the Minnesota attacks, saying during a Cabinet meeting, “They blame it on Iran. I don’t think so.” He instead blamed Minnesota officials.
