Authorities in Minnesota are investigating a series of cyberattacks that targeted over 30 water systems in the state, with warnings issued about the threat of Iranian hackers to critical infrastructure.
Cyberattacks on Water Systems
The cyberattacks, which took place on Sunday and Monday, did not result in any reports of impacted residents, although one city asked residents to conserve water for a couple of hours while they investigated the issue.
Minnesota IT Services stated that state officials had yet to identify who was behind the attacks, and the FBI, which is investigating, has not publicly identified a culprit. The FBI, Cybersecurity and Infrastructure Security Agency, and other agencies had previously warned in an advisory that Iranian hackers have been targeting water and wastewater systems, as well as operational controls in other critical infrastructure sectors.
Iranian Hackers
Cynthia Kaiser, former deputy assistant director of the FBI's cyber division, stated that Iran has the "geopolitical motivations" and a recent history of targeting water systems, making it a likely suspect in the cyberattacks. Kaiser added that "most credible researchers and responders would be right to treat it like it's Iran until proven otherwise."
Iran's interest in the operations of water systems inside the US dates back to 2016, when the Justice Department charged a group of Iranian hackers in connection with a cyberattack targeting a small dam near New York City.
Impact of the Cyberattacks
Minnesota IT Services reported that most of the confirmed attacks involved technology used to remotely monitor and control equipment, and that being impacted meant investigators confirmed malicious activity involving the system's technology, but did not mean every impacted community had their water service disrupted.
In the city of Braham, residents were asked to minimize water use for a few hours on Monday after the water plant was shut down due to a cyberattack. The city stated that the attackers shut down the operating controls, leaving the city only able to provide residents with the water held in the water tower.
In Plymouth, a city of about 80,000, officials reported that their water infrastructure communications had been restored by Tuesday afternoon following a cyberattack, and that crews were able to continue operating the system during the outage without any impact on water levels or quality.
Vulnerability of Water Systems
Local water plants and healthcare facilities often lack the funds and know-how to install the latest software patches or take other security steps, making them a favorite target for hackers due to the relative ease of penetrating them and the panic such disruptions can cause.
Digital warfare has become ingrained in military conflict, and the vulnerability of water systems and other critical infrastructure to cyberattacks is a growing concern. The FBI, Cybersecurity and Infrastructure Security Agency, and other agencies have warned about the threat of Iranian hackers and the importance of protecting critical infrastructure from cyber threats.
As the investigation into the cyberattacks on Minnesota water systems continues, officials are urging water sector organizations to take steps to protect their operational technology (OT) from cyber threats. The Cybersecurity and Infrastructure Security Agency has issued guidance on OT isolation for critical infrastructure, and experts are emphasizing the importance of prioritizing cybersecurity in the protection of critical infrastructure.
Source: SecurityWeek