Foreign Actors Targeted Small Water Systems in Colorado, Governor's Office Says
The incidents involved altering equipment settings and disabling remote access, but water quality was not impacted.
Foreign actors targeted small, private water providers in Colorado over the summer, according to the Colorado governor's office. The incidents, which involved individuals changing equipment settings, disabling remote access and alarms, and altering pumping cycles, were brief and quickly addressed by the providers themselves.
"To our knowledge, treatment processes and water quality were not impacted at either provider," a spokesperson for Gov. Jared Polis stated. The impacted systems each served fewer than 200 people.
While the governor's office did not identify the foreign actors, they are aware of Iranian activity targeting water systems nationwide. Iran was the prime suspect in similar cyberattacks on water treatment and wastewater utilities across the country over the summer, according to sources, although its involvement has not been officially confirmed. These types of intrusions can disable utility operators by changing passwords or shutting down alarms.
At least a dozen states have reported potential cyber intrusions targeting water and wastewater utilities, multiple sources told ABC News. The FBI has advised utilities to disconnect systems from the internet when possible, implement breakers, and familiarize themselves with manual control procedures in case automated systems are compromised.