Iran-Linked Hackers Target More US Water Infrastructure in New Jersey and Alabama
Iran-linked hackers hit water utilities in New Jersey and Alabama, bringing confirmed US water-infrastructure attacks to at least 12 states.
Iran-linked hackers attacked the Cape May Sewer Department and Woodbine Water Department in New Jersey and the Childersburg Water, Sewer and Gas system in Alabama on July 27, bringing confirmed US water-sector attacks to at least 12 states since late July. The intrusions targeted internet-exposed industrial control systems, including Rockwell Automation PLCs, with roughly 12 hours of impact in New Jersey and no impact on water quality or service. The FBI confirmed seven affected states by July 30, and CISA has urged utilities to remove PLCs from direct internet exposure. New York announced more than $9 million in grants to strengthen water-sector cybersecurity.
- New Jersey utilities (Cape May, Woodbine) and Alabama's Childersburg system were hit simultaneously on July 27.
- Hackers altered settings to prevent remote access but did not seize control of water systems.
- Campaign targets internet-exposed PLCs and ICS from Rockwell Automation and potentially other vendors.
- Minnesota previously reported 30+ affected systems; Wisconsin, Pennsylvania and Washington issued warnings.
- New York committed over $9 million in grants for water-sector cybersecurity.
- Vendors
- Rockwell Automation
- Threat actors
- Iran-linked hackers
- Countries
- United States
From the original article
2 min read at securityaffairs.com
Iran-linked hackers targeted Water Infrastructure in New Jersey and Alabama, bringing confirmed attacks to at least 12 states, with limited disruption. The wave of cyberattacks targeting US water infrastructure has reached New Jersey and Alabama, bringing the confirmed count to at least 12 states since late July.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.