Cyber Intrusion Blamed for Hardware Failure at Water Utility
Summary: A state cyber fusion notice dated Nov. 10, 2011 reported that an employee at the Curran-Gardner Public Water District near Springfield, Ill., found SCADA problems on Nov. 8, and that an IT repair firm traced the intrusion to a Russian IP address. The alert said attackers had pulled usernames and passwords for various SCADA systems from a U.S. software company's database and, over 2-3 months of remote logins that powered the system on and off, burned out a water pump; DHS's Peter Boogaard said there was "no credible corroborated data" indicating a risk to critical infrastructure or public safety.
What you should know: The credentials came from a third-party software vendor's database, and the damage took 2-3 months of toggling to surface - a timeline in which the pump failure read as a glitch, not an attack, and DHS and the FBI were still gathering facts.
Read the original at Krebs on Security ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026