Colorado water utilities (Victim): news timeline & CVEs

Foreign Hackers Target Two Colorado Water Utilities

Foreign hackers briefly altered OT settings at two small Colorado water utilities without disrupting service.

Foreign attackers accessed operational technology at two small private Colorado water utilities in late August 2026, changing equipment settings, disabling remote access and alarms, and altering pumping cycles. Governor Jared Polis's office said the brief intrusions did not affect drinking water quality, treatment, or public safety; the utilities serve fewer than 200 people and were not named. Officials cited an Iranian-backed effort against U.S. water systems but said they could not confirm which actors were involved or a link to July incidents that hit exposed PLCs in at least a dozen states. In those earlier cases, attackers changed PLC addresses and passwords and sometimes disabled shutdown processes.

Security AffairsSep 21, 18:09 UTC · 5d agoData breach in the wild 2 sources

Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems

Hackers described as foreign actors targeted OT/ICS at two small Colorado water utilities in late August, altering settings and alarms without disrupting service.

Attackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles at two private Colorado water utilities serving fewer than 200 people, with no impact on water services or public safety. Colorado's governor's office attributed the attacks only to 'foreign actors,' noting CISA is tracking Iranian-backed efforts against US drinking and wastewater systems. A broader campaign hit internet-exposed water systems in at least a dozen states, with CISA aware of 100 targeted systems in July. No utilities were named and attribution remains unconfirmed.

SecurityWeekupdated Sep 21, 18:09 UTC · 5d agofirst Sep 21, 10:03 UTC · 6d agoThreat actor in the wild 2 sources

Foreign actors breach Colorado water systems

Foreign hackers breached two small Colorado water utilities in August, changing equipment settings and disabling remote access and alarms on drinking water controls.

Two privately owned Colorado water utilities, each serving fewer than 200 people, were breached in late August by foreign actors, Governor Jared Polis' office told Axios. The hackers manipulated equipment used to control drinking water systems, changed equipment settings, and disabled remote access and alarms. The disclosure adds to a string of foreign intrusions into US water infrastructure.

DataBreaches.netSep 18, 20:11 UTC · 8d agoData breach in the wild

Colorado water utilities

Timeline3 articles

Appears with

Foreign Hackers Target Two Colorado Water Utilities

Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems

Foreign actors breach Colorado water systems