Water Facilities Warned to Improve Cybersecurity as Nation-State Hackers Pounce
The water sector is under pressure to improve cybersecurity protections as hacking threats grow.
The water sector is under pressure to improve cybersecurity protections as hacking threats grow.
A hacking group behind cyberattacks on water systems in the United States, Poland and France is connected to the Russian military, a cybersecurity firm has found, signaling a possible escalation by Moscow to target adversaries’ infrastructure.
In late November, an Iranian-backed hacking group attacked Israeli-made digital controls commonly used in the water and wastewater industries in the US, affecting multiple organizations across several states.
A top White House national security official said recent cyber attacks by Iranian hackers on U.S. water authorities — as well as a separate spate of ransomware attacks on the health care industry — should be seen as a call to action by utilities and industry to tighten cybersecurity.
Three members of Pennsylvania’s congressional delegation have asked the Department of Justice to investigate how foreign hackers breached a water authority near Pittsburgh, which prompted warnings to other water treatment facilities.
Hackers are targeting industrial control systems widely used by water and sewage-treatment utilities, potentially threatening water supplies, the top U.S. cyberdefense agency said after a Pennsylvania water authority was hacked.
This week the U.S. Court of Appeals for the Eighth Circuit granted a request from the American Water Works Association (AWWA) and the National Rural Water Association (NRWA) to stop the U.S. Environmental Protection Agency’s Cybersecurity Rule from going into effect until a current case challenging the rule has been decided.
According to government officials, security experts and persistent media reports, all signs indicate that cybersecurity is an issue that is here to stay and puts U.S. infrastructure squarely in the crosshairs of hackers and foreign governments. Recently the issue has been heightened by the war in Ukraine and has increased concerns about a potential Russian retaliation to U.S. sanctions that may come in the form of a cyberattack.
But whether it’s Russia, China, another foreign government or an independent hacker, concerns about how cyberattacks could impact infrastructure in the United States have been elevated – and a look at how they could affect the water industry is fascinating.
When it comes to cybersecurity, a recent report by the Legislative Analyst’s Office found the agriculture and water sectors have a long way to go.
Now, a Central Valley lawmaker is proposing legislation to help beef up cybersecurity for those sectors.
With a geopolitical crisis playing out thousands of miles away, the drinking water sector in the U.S. has doubled its resolve against potential attacks against their digital systems.