Recommendations Following the Oldsmar Water Treatment Facility Cyber Attack
Summary: The City of Oldsmar disclosed an unlawful intrusion into its water treatment system in which an attacker used TeamViewer, installed on an operator machine and reachable from the internet, to raise the sodium hydroxide dosing setpoint from 100 ppm to 11,100 ppm. The operator on duty saw the mouse moving on the operating screen, watched the changes being made, and restored normal parameters before pH monitoring alarms detected a level outside acceptable limits.
Key Takeaway: The dose was set more than 100 times its normal level, and Dragos states the action could have resulted in people getting sick or potentially even death had the operator not been watching the screen at that moment.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026