PLC Cybersecurity in Crisis: Water Breaches Hit 12+ States
On this page
PLC Cybersecurity in Crisis: Water Breaches Hit 12+ States
from a back-office IT concern to a boardroom emergency. After malicious actors disrupted operations at water and wastewater utilities across more than a dozen states, four federal agencies issued a joint advisory urging operators to cut internet exposure entirely.
Detail
The message from the U.S. Environmental Protection Agency (EPA), Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (NSA) is blunt: a programmable logic controller that can be reached from the public internet is a liability, not a control asset.
The economics of this threat are unfavorable. Hardening a small municipal utility costs little more than disciplined configuration , removing inbound port exposure, rotating default credentials, and routing access through a monitored gateway. Recovering from a locked-out PLC, by contrast, can mean lost pressure, flooded infrastructure, and emergency engineering support.
The intrusions did not stay local. State officials in Minnesota were the first to report incidents, with more than 30 community water systems targeted on July 26 and 27. Within days, the FBI confirmed that utilities in at least seven states had reported attacks affecting operations.
By early August, reporting indicated that facilities in at least 12 states were remediating cyberattacks on their operational technology. Federal officials have described it as one of the broadest coordinated campaigns ever directed at U.S. municipal water systems.
Water and wastewater utilities in at least seven states report operational disruptions to the FBI.
The FBI and EPA issue a Public Service Announcement warning that malicious actors are targeting internet-facing Rockwell Automation/Allen-Bradley MicroLogix 1100 and 1400 PLCs.
CISA, NSA, FBI, DOE, and EPA publish advisory AA26-231A on an active threat to Siemens S7 Series PLCs.
Sourcing help
Send the BOM for one quote covering active stock, EOL stock and cross-references.
Need a quote for this part?
Send us the part number or article link — we will confirm price, availability and lead time.
