SpyCloud: infostealer exposure hits 1,787 US water utilities

Research by identity risk firm SpyCloud found that 1,787 of 10,000 analyzed US water and wastewater organizations have identity data actively exposed by infostealers. In one case, a single infected device at a smart meter vendor held logins tied to roughly 167 utility metering tenants.

• 1,787 of 10,000 US water organizations showed active infostealer exposure
• 258 of them had credentials for OT or remote-access systems
• One infected smart meter vendor device exposed logins for about 167 utility tenants
• SpyCloud began responsible disclosure, starting with a CISA briefing