conv.

All stories
SecurityQuiet 3d · day 6

Foreign hackers breached two Colorado water utilities in August

State officials confirm late-August intrusions at small systems; no water quality impact reported, but incidents add to nationwide wave of attacks.

newest coverage 2d agosummary written 2d ago5 pieces NewswiresRedditMastodon

What to know

  • Foreign actors breached two small Colorado water utilities in late August, altering equipment settings and disabling alarms, but water quality and treatment processes were unaffected.
  • The incidents are part of a nationwide wave of cyberattacks on over 100 water systems across at least a dozen states; federal authorities suspect Iranian-backed hackers are responsible.
  • Experts warn that utilities relying on internet-connected operational systems remain vulnerable and call for critical controls to be isolated from public internet access.
  • Colorado officials are distributing new security guidance to state agencies and monitoring for additional threats, including suspected North Korean actors attempting to gain employment access.

“These two incidents consisted of individuals changing equipment settings, disabling remote access and alarms, and altering pumping cycles.”

Ally Sullivan, Governor Polis' spokeswoman · Denver Post ↗

Jared PolisJared Polis Colorado GovernorAlly Sullivan Governor Polis' spokeswomanSteve Bucci Heritage Foundation visiting fellow, former Pentagon officialSarah Tuneberg Colorado Chief Information OfficerCybersecurity and Infrastructure Security Agency (CISA) Federal cybersecurity authority

Foreign hackers breached two Colorado water utilities in August
Jerusalem Post

How it unfolded 2 developments, newest first · click a bar or a number to jump articlesposts

Peak 2 pieces in two hours at Sep 19, 3 AM; 5 pieces over 6 days (3 articles · 2 posts) Sep 18, 5 AM — 1 piece · 1 article — Newswires 1Sep 18, 7 AM — quietSep 18, 9 AM — quietSep 18, 11 AM — quietSep 18, 1 PM — 1 piece · 1 article — Newswires 1Sep 18, 3 PM — quietSep 18, 5 PM — quietSep 18, 7 PM — quietSep 18, 9 PM — quietSep 18, 11 PM — quietSep 19, 1 AM — quietSep 19, 3 AM — 2 pieces · 1 article · 1 post — Newswires 1, Reddit 1Sep 19, 5 AM — quietSep 19, 7 AM — quietSep 19, 9 AM — quietSep 19, 11 AM — quietSep 19, 1 PM — quietSep 19, 3 PM — quietSep 19, 5 PM — quietSep 19, 7 PM — quietSep 19, 9 PM — quietSep 19, 11 PM — quietSep 20, 1 AM — quietSep 20, 3 AM — quietSep 20, 5 AM — quietSep 20, 7 AM — quietSep 20, 9 AM — quietSep 20, 11 AM — quietSep 20, 1 PM — quietSep 20, 3 PM — quietSep 20, 5 PM — quietSep 20, 7 PM — quietSep 20, 9 PM — quietSep 20, 11 PM — quietSep 21, 1 AM — quietSep 21, 3 AM — quietSep 21, 5 AM — quietSep 21, 7 AM — quietSep 21, 9 AM — quietSep 21, 11 AM — quietSep 21, 1 PM — quietSep 21, 3 PM — 1 piece · 1 post — Mastodon 1Sep 21, 5 PM — quietSep 21, 7 PM — quietSep 21, 9 PM — quietSep 21, 11 PM — quietSep 22, 1 AM — quietSep 22, 3 AM — quietSep 22, 5 AM — quietSep 22, 7 AM — quietSep 22, 9 AM — quietSep 22, 11 AM — quietSep 22, 1 PM — quietSep 22, 3 PM — quietSep 22, 5 PM — quietSep 22, 7 PM — quietSep 22, 9 PM — quietSep 22, 11 PM — quietYesterday, 1 AM — quietYesterday, 3 AM — quietYesterday, 5 AM — quietYesterday, 7 AM — quietYesterday, 9 AM — quietYesterday, 11 AM — quietYesterday, 1 PM — quietYesterday, 3 PM — quietYesterday, 5 PM — quietYesterday, 7 PM — quietYesterday, 9 PM — quietYesterday, 11 PM — quietToday, 1 AM — quietToday, 3 AM — quiet 12
Sep 19Sep 20Sep 21Sep 22yesterdaynow · 4:44 AM ET
  1. 2

    Security expert warns of urgent need to isolate critical controls

    Steve Bucci, former Pentagon official and Heritage Foundation visiting fellow, analyzes the surge of cyberattacks and emphasizes the urgent need for local governments to isolate critical controls from the public internet to protect against state-sponsored actors.

    “The incidents demonstrate how hackers can reach beyond traditional computer networks and gain access to operational technology used to control physical equipment at water facilities.”
    — Fox News, News outlet · source
    • The_IT_Nerd@noc.social

      Hackers manipulate operational systems at Colorado water utilities Foreign hackers breached operational technology systems at two private Colorado water utilities in late August, according to a spokesperson for Colorado Governor Jared Polis who…... https:// itnerd.blog/2026/09/21/hackers -manipulate-operational-systems-at-colorado-water-utilities/

      The_IT_Nerd@noc.socialMastodon2d agoview on Mastodon ↗
  2. 1

    Colorado governor's office publicly confirms water utility breaches

    Gov. Jared Polis' office confirmed the August hacking incidents at the two Colorado utilities, stating that treatment processes and water quality were not impacted despite the intrusions.

    “We cannot confirm what foreign actors may have been involved, but we are aware of ongoing efforts across the nation by an Iranian-backed group to access drinking water and wastewater systems.”
    — Ally Sullivan
    1. 1 outlet Foreign hackers targeted Colorado water systems in August, governor's office says

      first by Jerusalem Post, 5d ago

    2. 1 outlet ‘Foreign actors’ briefly hacked two small Colorado water utilities last month, state says

      first by Denver Post, 5d ago

  3. background

    Foreign actors breach two Colorado water utilities — Computer systems at two small Colorado utilities serving fewer than 200 people each were compromised in late August. Hackers altered equipment settings, disabled remote access and alarms, and changed pumping cycles, but operators quickly regained control.

  4. background

    CISA advisories document wave of attacks across multiple states — The Cybersecurity and Infrastructure Security Agency issued advisories documenting cyberattacks targeting more than 100 drinking water and wastewater systems across approximately a dozen states and 12 states total.

  5. background

    Hackers attempt access to water systems in at least seven states — Multiple states reported hacking attempts on water systems, with some degrading water operations. At least seven states reported incidents.

  6. background

    FBI and agencies warn of Iranian-linked threats to water systems — Federal authorities including the FBI warned of Iranian-affiliated actors seeking to cause disruptive effects within the United States, targeting water and energy systems specifically. The warning came after earlier hacking attempts.