Two privately owned water utilities in Colorado that serve fewer than 200 people each were breached by foreign hackers in August. The attackers manipulated operational technology to change equipment settings, alter pumping cycles, and disable both alarms and remote access, according to the governor’s office. Control was regained quickly by operators, and the intrusions did not impact treatment processes, public safety, or drinking water quality.
Colorado officials have not yet identified the attackers or confirmed if the incidents are linked to an Iranian-backed group targeting wastewater systems nationwide. More than 100 drinking water and wastewater systems across 12 states have been targeted by cyberattacks this year.
