New Jersey, Alabama water systems hit in cyberattacks
Officials reported phone disruptions in Cape May and Woodbine, N.J., and industrial control systems were targeted in Childersburg, Ala., with no reported impact on drinking water.
New Jersey and Alabama confirmed on July 27 they were targeted in a hacking campaign that began in late July and has affected at least a dozen states. Cape May and Woodbine experienced phone-system disruptions, while Childersburg Water, Sewer and Gas reported attempts against industrial control equipment. Authorities reported no evidence of contaminated water or loss of drinking-water service.
Federal and state agencies have confirmed multiple incidents. Minnesota was the first to report that more than 30 water systems had their operational technology systems targeted. Michigan, South Dakota and Georgia later reported attempted intrusions. The FBI said at the end of July that at least seven states had been targeted. Wisconsin, Pennsylvania and Washington have issued advisories to utilities but have not confirmed specific intrusions. New York has not reported attacks but approved more than $9 million in grants to strengthen water-sector cybersecurity.
Cybersecurity officials linked the campaign to actors operating from Iran and said the intrusions targeted devices made by Rockwell Automation and potentially other industrial vendors. The attacks focused on operational technology and industrial control system components that manage pumps, valves and monitoring equipment.
The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency urged water utilities to isolate control networks from business networks, apply security patches, increase monitoring and review access controls. Agencies warned operators to look for indicators of compromise and to share information with state and federal partners.
Local responses varied. Some utilities temporarily shut down affected systems or isolated networks while engineers and cybersecurity teams investigated and restored communications. Public health officials and utility managers informed residents that tap water remained safe to drink.
Investigators continue to assess the scale and methods of the campaign. State and federal officials said they will coordinate with utilities to share technical indicators and mitigation steps and that grants and guidance are available to help utilities harden operational technology defenses.
Articles by this author
