US Intelligence Details Iranian State Cyber Attacks Targeting Municipal Water Utilities
CISA and the FBI have released a detailed advisory uncovering coordinated cyber intrusions by Iranian-linked threat actors targeting supervisory control and data acquisition (SCADA) systems at municipal water treatment facilities.
Federal cybersecurity authorities released a joint advisory today detailing cyber intrusions targeting industrial control systems across multiple municipal water and wastewater treatment facilities in the United States. According to CISA, threat actors tied to Iran's Islamic Revolutionary Guard Corps (IRGC) exploited default administrative credentials on exposed internet-connected Programmable Logic Controllers (PLCs).
While facility operators confirmed that water safety and pressure systems remained uncompromised due to physical fail-safe backups, the intrusions allowed unauthorized actors to alter operational parameters and tamper with human-machine interface (HMI) screens.
Vulnerabilities in Operational Technology (OT) Networks
The investigation revealed that affected utility providers failed to isolate OT control networks from public internet access and lacked multi-factor authentication (MFA) on remote management portals. Attackers utilized automated scanning tools to locate unpatched industrial controllers online.
"Critical infrastructure systems must never be directly accessible from the public internet without strong authentication and network segmentation," warned CISA Executive Assistant Director Eric Goldstein.
Get Tech Pulse Daily in Your Inbox
Join 45,000+ engineers, founders, and tech leaders receiving high-signal daily breakdowns directly from major publishers.
Zero spam. Unsubscribe anytime in one click.
Mandatory Remediation Directives
Federal agencies have mandated that water utility operators immediately enforce MFA, change default device passwords, update PLC firmware, and implement offline backup procedures for all critical pumping and chemical treatment machinery.
Congress is currently evaluating bipartisan legislation to enforce mandatory cybersecurity compliance standards across small and medium-sized municipal utility providers nationwide.