Local Water Providers Respond to Nationwide Cybersecurity Threats Targeting Water Systems
Water providers across Tennessee are enhancing their cybersecurity measures in response to a series of nationwide threats targeting water entities in at least 12 states. The FBI and Environmental Protection Agency issued a public service announcement on July 30, warning the Water and Wastewater System sector about 'malicious cyber actors.' Incidents reported in Minnesota and other states between July 26-27 involved hackers targeting publicly exposed programmable logic controllers (PLCs), modifying passwords, and changing IP addresses to disconnect equipment, leading to loss of monitoring and control. Some facilities reported modified PLC project files, and operational effects included loss of pressure and flooding. While agencies have not officially attributed these attacks to ongoing conflicts, similar cyberattacks in 2023 and 2024 were linked to the CyberAv3ngers, a group associated with Iran's Islamic Revolutionary Guard Corps.