In late August, two private water utilities in Colorado became the latest victims in a series of cyberattacks targeting operational technology (OT) systems. These attacks appeared to focus on creating operational disruptions, although they did not ultimately affect water services or public safety.
Details of the Cyberattack
The cybercriminals targeted the industrial control systems (ICS) of these utilities, which serve fewer than 200 residents. According to a spokesperson for Colorado Governor Jared Polis, the attackers manipulated equipment settings, disabled remote access and alarms, and altered the pumping cycles. Fortunately, these disruptions were quickly contained.
Identifying the Attackers
While the governor’s office has not disclosed specific utilities affected or the identities of the attackers, they have referred to them as “foreign actors.” A spokesperson indicated awareness of nationwide efforts by an Iranian-backed group to infiltrate drinking water and wastewater systems, as noted by the Cybersecurity and Infrastructure Security Agency (CISA).
Despite these assertions, no direct connection has been confirmed between the Colorado incidents and a broader campaign targeting water facilities in multiple states, including Minnesota, Michigan, and Georgia, earlier in the year.
Impact and Response
CISA has issued warnings to the water sector to secure their OT systems against potential threats. The agency reported that in July, approximately 100 internet-exposed water systems were targeted by cyberattacks. In response, independent security organizations, such as Infracritical, have set up repositories to collect and share technical data on these breaches.
This incident highlights the ongoing vulnerabilities within critical infrastructure sectors and underscores the need for enhanced cybersecurity measures. It also draws attention to legislative efforts, such as new Senate bills aimed at bolstering cybersecurity defenses in water systems.
As cyber threats continue to evolve, maintaining robust security protocols and industry-wide collaboration become crucial to protecting public utilities and ensuring public safety.
