Minnesota IT officials disclose ‘coordinated cyberattack’ at more than 30 local water systems
FILE PHOTO: A man holds a laptop computer as cyber code is projected on him in this illustration picture taken on May 13, 2017. REUTERS/Kacper Pempel/Illustration/File Photo
Read a summary of this article on FAST.
Get bite-sized news via a new
cards interface. Give it a try.
Click here to return to FAST
Tap here to return to FAST
FAST
July 28 : A “coordinated cyberattack” targeted more than 30 community water systems in the U.S. state of Minnesota on July 26 and July 27, the state’s IT agency said in a statement.
The agency, Minnesota IT Services, said it was not aware of any active requests from Minnesota cities to have residents modify their drinking water usage, according to the statement, which comes a day after local media reported that four Minnesota cities issued notices about cyberattacks on their networks.
The attacks are similar to a wave of cyber intrusions against U.S. water infrastructure that officials have in the past attributed to Iranian-affiliated hackers, raising concerns about the vulnerability of local utilities that serve millions of people.
Emily Zimmer, a spokesperson for the agency, told Reuters in an email that while the investigation remains ongoing, “the timing, methods of access, and targeted infrastructure share characteristics with other coordinated cyber incidents our federal partners have observed involving critical infrastructure.”
Guess Word
Crack the word, one row at a time
Buzzword
Create words using the given letters
Mini Sudoku
Tiny puzzle, mighty brain teaser
Mini Crossword
Small grid, big challenge
Word Search
Spot as many words as you can
Zimmer said the agency could not yet discuss formal attribution or specifics of the incidents. Zimmer said the agency used the term “attack” to describe the situation “because investigators identified unauthorized access with malicious intent directed at these systems.”
The FBI and the Cybersecurity and Infrastructure Security Agency did not immediately respond to requests for comment.
While it is not yet clear who is responsible for the attacks, Iranian-linked hackers have for years targeted U.S. water systems to varying levels of success.
An April 7 CISA advisory warned that Iranian-affiliated hackers were attacking internet-facing programmable logic controlers, computer devices used to interact with machinery and other critical infrastructure networks, manufactured by Rockwell Automation.
A July 22 update to the advisory expanded the scope of the targeting to include devices manufactured by Schneider Electric, Siemens and potentially other manufacturers.
“CISA’s updated reporting shows a worrying expansion in Iran-linked critical infrastructure targeting focused on the United States,” Joe Slowik, director of threat research and cyber engineering at cybersecurity firm Dataminr, said in a July 27 blog posted to the company’s website.
While the initial advisory was concerning enough, Slowik said, “Extending this activity to encompass additional equipment lines and pairing this with process manipulation and safety degradation makes matters more concerning as it enables various physical impact scenarios.”
Source: Reuters
Sign up for our newsletters
Get the CNA app
Stay updated with notifications for breaking news and our best stories
Get WhatsApp alerts
Join our channel for the top reads for the day on your preferred chat app
Get bite-sized news via a new
cards interface. Give it a try.
Click here to return to FAST
Tap here to return to FAST
FAST
About The Author
