Sage Water Resources Restores PLC After Malicious Logic Changes at Utah Facility

· Original article ↗

Summary

Sage Water Resources says it detected malicious PLC logic changes at its Utah facility on March 15, 2026, and stopped them before damage occurred. The company reports restoring operations and hardening the system.

Key points

  • Sage Water Resources reported unauthorized PLC activity at its salt water disposal facility in Duchesne, Utah, on March 15, 2026.
  • The company says forensic analysis with federal law enforcement and cybersecurity experts identified malicious logic manipulation.
  • SWR said a truck driver and its operations team helped detect and mitigate the changes before physical or environmental damage occurred.
  • The company reports restoring the PLC’s operational logic and transitioning its network from a legacy configuration to a hardened PLC/VPN setup.
  • SWR characterized the activity as consistent with a broader campaign targeting U.S. energy and water infrastructure; the article provides no independent attribution details.
  • The company said it is fully operational.

Article Details

Victim Organization
Sage Water Resources (SWR)
Incident Type
Malicious logic manipulation of a programmable logic controller (PLC) at a salt water disposal facility.
Incident Date
2026-03-15
Disclosure Date
2026-06-10
Operational Impact
Unauthorized PLC logic changes were detected and mitigated before causing physical or environmental damage. The PLC logic was restored, cybersecurity hardening was completed, and the company reported that it was fully operational.
Claim Status
confirmed

MITRE ATT&CK

People

Countries

Industries