How Cyber Safe is Your Drinking Water Supply?
Summary: A survey of roughly 600 water and wastewater utility employees by the Water Sector Coordinating Council found that 37.9 percent of utilities had identified all IT-networked assets, while just 30.5 percent had identified all operational technology assets. The report follows incidents including a 2019 hack of a Kansas public water system by a former employee, the February 2021 Oldsmar, Florida breach that raised sodium hydroxide to 100 times normal levels via a TeamViewer account, and a January attempt on a San Francisco Bay Area plant using a former employee's TeamViewer credentials.
What's compelling: Roughly 40,000 utilities serve fewer than 3,300 residents and are not required to report their cybersecurity practices to the EPA, while 38 percent of water systems spend less than 1 percent of their annual budgets on cybersecurity.
Read the original at Krebs on Security ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026