DHS Blasts Reports of Illinois Water Station Hack
Summary: DHS's ICS-CERT said that after detailed analysis, DHS and the FBI found no evidence of a cyber intrusion into the SCADA system of the Curran-Gardner Public Water District in Springfield, Illinois, and no evidence that credentials were stolen, that a vendor was involved in malicious activity, or that there was malicious traffic from Russia or any foreign entity. The claims traced back to a leaked Illinois fusion center report, based on raw unconfirmed data, that described a Nov. 8, 2011 pump burnout following remote access from a Russian IP address; ICS-CERT said its analysis is ongoing and it is still investigating a separate claimed Texas water-system hack by a hacker using the nickname "pr0f".
What's compelling: The initial account - a Russian IP address, stolen SCADA credentials, a burned-out pump - spread through media and a state fusion center before DHS and the FBI concluded none of it was supported, which is the gap a security leader has to plan around when an incident's first public version arrives.
Read the original at Krebs on Security ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026