Water system cyberattacks are a growing threat to communities across the US. In a single week, hackers targeted water and wastewater systems in as many as seven states, according to FOX 4’s report, including more than 30 attacks in Minnesota alone. FITECH CEO Ian Marlow joined FOX 4 to explain how these attacks happen and what utilities need to do now.
How the attacks work
Many water and wastewater plants use devices that connect their controls to the internet, so staff can manage them remotely. Hackers are targeting these devices, changing passwords and IP addresses to take over control. The FBI, EPA, and Cybersecurity and Infrastructure Security Agency (CISA) have sent alerts to municipalities nationwide.
According to the report, water safety has not been affected so far. But as Ian explains, if attackers gain access to several devices in one area, they could divert or disrupt service.
Why utilities are vulnerable
Ian points to a common problem: older technology. Hardware, internet connections, and firewalls often stay in place for years, leaving what’s called an “open port,” an easy way in for attackers. Many utilities believe they’ve made the needed updates, but not everyone has, and they need to move faster.
What needs to happen now
- Take vulnerable devices offline and fix them as soon as possible
- Replace or update outdated hardware and firewalls
- Close open ports and unused access points
- Use strong, unique passwords that mix letters, numbers, and symbols
The same steps that protect your home network apply to the systems that deliver our water.
Protect your organization
FITECH helps businesses find and fix gaps like these before attackers do. Learn more about our [Cybersecurity services], or watch more of Ian’s [news interviews]