Ongoing cybersecurity attacks linked to Iran have affected U.S. water systems, EPA and security agencies announced today.
U.S. organizations and infrastructure — particularly in the water sector — have reported technical disruptions like mechanical sensor tampering and human machine interface problems as a result of the Iranian-affiliated virtual threat, according to a joint advisory announcement from EPA, along with the FBI, Cybersecurity and Infrastructure Security Agency and the National Security Agency.
“Cyberattacks on drinking water and wastewater systems directly threaten public health and community resilience. A single breach can disrupt treatment or introduce contaminants, damage equipment, and erode public trust,” wrote Jeffrey Hall, EPA assistant administrator for enforcement and compliance assurance, in the release. “Our national security depends on water systems not only taking security seriously but also immediately reporting any incidents and working with our investigators to address them while protecting the public.”
Cyber threats to water systems are particularly dangerous, potentially affecting surrounding households and hospitals, among other critical infrastructure. The attacks have already caused general water system operational issues and financial losses, according to the release.
