Cyberattacks Disrupt OT Systems at Two Colorado Water Utilities
Summary
Attackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles at two Colorado water utilities. Disruptions were brief and did not affect water service or public safety; links to an Iran-backed campaign are unconfirmed.
Key points
- The attacks targeted OT/ICS systems at two private Colorado water utilities in late August.
- A spokesperson for Gov. Jared Polis said attackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles.
- The disruptions were brief and did not affect water services or public safety; the utilities serve fewer than 200 people.
- Authorities have not named the utilities or identified the attackers, describing them only as “foreign actors.”
- A connection to an Iran-backed campaign targeting water systems across the US has not been confirmed.
- CISA said it was aware of 100 internet-exposed water systems targeted in July and urged the water sector to secure OT.
Article Details
- Victim Organization
- Two unnamed private water utilities in Colorado
- Incident Type
- Cyberattack targeting operational technology and industrial control systems
- Operational Impact
- Attackers reportedly changed equipment settings, disabled remote access and alarms, and altered pumping cycles. Disruptions were brief and did not affect water services or public safety.
- Claim Status
- alleged