Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems
Hackers described as foreign actors targeted OT/ICS at two small Colorado water utilities in late August, altering settings and alarms without disrupting service.
Attackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles at two private Colorado water utilities serving fewer than 200 people, with no impact on water services or public safety. Colorado's governor's office attributed the attacks only to 'foreign actors,' noting CISA is tracking Iranian-backed efforts against US drinking and wastewater systems. A broader campaign hit internet-exposed water systems in at least a dozen states, with CISA aware of 100 targeted systems in July. No utilities were named and attribution remains unconfirmed.
70