Colorado Water Utilities Breached
Foreign Hackers Breach Two Colorado Water Utilities Amid Rising Infrastructure Cyberthreats
Anonymous
Foreign actors breached two small, privately owned Colorado water utilities in late August, changing equipment settings, disabling remote access and alarms, and altering pumping cycles before operators regained control. The utilities, each serving fewer than 200 people, reported no known effect on water treatment, drinking-water quality, public safety, or service, and the incidents were quickly resolved. State officials have not identified the attackers or determined whether the breaches were connected to a broader campaign, but they said federal agencies are tracking efforts by an Iranian-backed group to access U.S. water and wastewater systems. The incidents add Colorado to a growing number of states reporting cyber intrusions targeting internet-connected operational technology at water facilities. Federal and state officials are urging utilities to strengthen cybersecurity, limit internet exposure where possible, and prepare to operate equipment manually if automated systems are compromised.
Key Points
1
The Environmental Protection Agency says high-profile cyberattacks have affected more than 100 drinking-water and wastewater systems across 12 states this year, indicating a broader footprint than the incidents previously reported in Colorado.
2
The breaches demonstrated that attackers could reach operational technology controlling physical infrastructure—including pumps, valves and other machinery—rather than merely compromising conventional computer networks.
3
Denver Water, which serves about 1.5 million people in the metropolitan area, said it evaluated the threat and found no impact to its systems while coordinating with state and federal cybersecurity officials.
4
The FBI has advised utilities to disconnect systems from the internet where feasible, use systems equipped with breakers and practice reverting to manual controls if automated systems are compromised.
5
Colorado is distributing additional guidance to agencies, including enhanced identity verification for job applicants, as part of efforts to guard against international threats.
Sentiment
Mostly NegativeNEGATIVENEUTRALPOSITIVE
Publishers
5
Articles
70
Reach
75
Topics
A
AnonymousAuthor
