CSIS is mapping what is known so far about the recent cyberattacks on U.S. water systems, and the scope is larger than early reports suggested. Minnesota officials disclosed that more than 30 water systems were attacked in late July, and CSIS says cyber actors have targeted water systems in at least 12 states. The U.S. government has not publicly attributed the attacks, but CSIS says officials are beginning to understand the scope of what is likely an Iranian cyber campaign months in the making. The damage reported so far has been limited, but the campaign shows how exposed local water utilities can be when adversaries target the systems that keep water moving, pressurized, and treated.
Why This Matters:
When a foreign-linked cyber campaign reaches water utilities across multiple states, the threat is no longer abstract. Water infrastructure controls the pumps, pressure, treatment, storage, and flow that communities depend on every hour. CSIS notes that utilities are attractive targets because they are critical to daily life, often locally managed, and frequently under-resourced. Families cannot control utility cybersecurity or federal response time, but they can reduce the risk at home by having stored water and water filtration ready if the system is taken offline or trust in local water is shaken.
Read the full article here.
Source: CSIS
By: Emily Harding, Aosheng Pusztaszeri, Lauryn Williams, Nikita Shah, Aashka Vyas, and Carter Musheno
