Cyberattacks Hit OT Systems at Two Colorado Water Utilities

In late August, hackers targeted operational technology (OT) systems at two private water utilities in Colorado serving fewer than 200 people. Attackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, but disruptions were brief and did not affect water services or public safety.

• ICS at two Colorado water utilities serving fewer than 200 people were targeted
• Attackers changed settings, disabled remote access, alarms and pumping cycles
• Officials call attackers "foreign actors" without confirming an Iran link
• CISA is aware of 100 internet-exposed water systems attacked in July