‘Coordinated Cyberattack’ Hits More Than 30 Minnesota Water Systems
The FBI said it was aware of the incident and was in contact with victims.
A “coordinated cyberattack” targeted more than 30 community water systems in the U.S. state of Minnesota on July 26 and July 27, the state’s information technology agency said in a statement.
Minnesota IT Services (MNIT) said on July 28 that it activated its incident response capabilities immediately after learning of the attack. MNIT said that an investigation remains active, and responders continue to “assess affected systems.”
“At this time, they are not aware of any active requests from Minnesota cities to have their residents modify their drinking water usage,” it said.
John Israel, MNIT Assistant Commissioner and Minnesota Chief Information Security Officer, said such attacks require “a coordinated, whole-of-government response.”
He added that the agency “is working side by side with our partners to share intelligence, support affected communities, and help utilities restore operations safely while strengthening defenses against future attacks.”
Emily Zimmer, a spokesperson for the agency, told Reuters in an email that while the investigation remains ongoing, “the timing, methods of access, and targeted infrastructure share characteristics with other coordinated cyber incidents our federal partners have observed involving critical infrastructure.”
Zimmer said the agency could not yet discuss formal attribution or specifics of the incidents. She added that the agency used the term “attack“ to describe the situation ”because investigators identified unauthorized access with malicious intent directed at these systems.”
The FBI said in a statement that it was aware of the incident and was in contact with victims “to resolve the matter.”
In a June 16 article about safeguarding critical water infrastructure, Microsoft said that while cyberattacks typically “wreak havoc” on digital systems, at a water utility, a network breach “can move quickly into the physical realm.”
“Online systems can give an attacker access to operational technology—physical equipment like pumps, sensors, and chemical treatment systems,” it said.
It said that local utilities make prime targets because of their size, and most U.S. water utilities are tiny operations.
According to the U.S. Environmental Protection Agency (EPA), 97 percent of the nation’s 156,000 public water systems serve fewer than 10,000 customers.
While it is not yet clear who is responsible for the attacks, Iranian-linked hackers have for years targeted U.S. water systems to varying levels of success.
…
https://www.theepochtimes.com/us/coordinated-cyberattack-hits-more-than-30-minnesota-water-systems-6068685