Increase Of Cyberattacks On Critical US Water Infrastructure. Every Critical Infrastructure Sector Targeted

EPA Deputy Administrator Janet McCabe reported cyberattacks against critical water infrastructure have become not only more frequent but have also increased in severity.

UNITED STATES - The United States Environmental Protection Agency (EPA) has released an "Enforcement Alert" to address cybersecurity vulnerabilities of the country's drinking water after EPA Deputy Administrator Janet McCabe reported cyberattacks against critical water infrastructure have become not only more frequent but have also increased in severity.

Chinese Hackers Embedded Malware In US Infrastructure, US Renews Controversial Section 702

US Government Disrupts Chinese Botnet Targeting Critical Infrastructure. Chinese Hackers Have Entire Nation In Crosshairs

As US Government Prepares For Iranian Cyberattacks, Group Attacks Water Service In Pennsylvania, CISA Releases Alert

Officials: China May Still Have Access To US Computer Networks

In light of both the increase in reported attacks on the water supply and an increase in vulnerabilities found in the country's water systems, the EPA urged water systems to act immediately to take steps to protect the nation's drinking water.

Not only have cyberattacks become more frequent and severe against critical infrastructure, but the EPA says that around 70% of the water utilities inspected by the federal government over the last year were in violation of cybersecurity standards put into place to prevent attacks on the systems.

McCabe said in many cases systems are not doing what they should be doing and have no available plans for vulnerability prevention. As the water systems often rely on computers with operating systems, some of the ways the utilities failed the standards:

• Failing to change default passwords for equipment

• Failing to lock out system access to ex-employees

Cyberattacks on water systems can lead to numerous problems with either the water supply or the alteration of the chemical composition of the water to hazardous levels:

• Interruption in the water treatment process

• Interruption in the water storage process

• Damage to valves that control the water flow

• Damage to the water pumps

• Altering of the water's chemical composition

• Change of chemical levels to dangerous amounts

“In many cases, systems are not doing what they are supposed to be doing, which is to have completed a risk assessment of their vulnerabilities that includes cybersecurity and to make sure that plan is available and informing the way they do business,” McCabe stated.

McCabe: Cyberattacks On Water Infrastructure Are Not Just Private Individuals, Many Government-Backed Entities. FDA: Every US Critical Infrastructure Sector Has Been Targets Of Cyberattacks