Cyberattacks against water utilities across the country are becoming more frequent and more severe, the Environmental Protection Agency warned Monday as it issued an enforcement alert urging water systems to take immediate actions to protect the nation’s drinking water.

About 70% of utilities inspected by federal officials over the last year violated standards meant to prevent breaches or other intrusions, the agency said. Officials urged even small water systems to improve protections against hacks. Recent cyberattacks by groups affiliated with Russia and Iran have targeted smaller communities.

Some water systems are falling short in basic ways, the alert said, including failure to change default passwords or cut off system access to former employees. Because water utilities often rely on computer software to operate treatment plants and distribution systems, protecting information technology and process controls is crucial, the EPA said. Possible impacts of cyberattacks include interruptions to water treatment and storage; damage to pumps and valves; and alteration of chemical levels to hazardous amounts, the agency said.

McCabe named China, Russia and Iran as the countries that are “actively seeking the capability to disable U.S. critical infrastructure, including water and wastewater.”

    • Jo Miran@lemmy.ml
      link
      fedilink
      arrow-up
      12
      arrow-down
      2
      ·
      4 months ago

      I can’t tell you what I do, but if you saw the stupid shit my firm sees, you’d be a prepper too.

      • Flying Squid@lemmy.world
        link
        fedilink
        arrow-up
        20
        ·
        4 months ago

        This sounds like the sort of thing I’ve heard preppers tell me for the almost 50 years I’ve been around.

        And I’ll repeat what I usually say: If society collapses to that point, I don’t want to survive the aftermath. I have no Mad Max fantasies.

        • Jo Miran@lemmy.ml
          link
          fedilink
          arrow-up
          14
          ·
          4 months ago

          No need for societal collapse. Most of my tech friends in Austin have rain collection tanks and emergency generators now after the grid collapse. Same goes with an uncle that moved to Puerto Rico.

          It doesn’t take much (not much at all) to put you and your family in a position where you don’t have safe drinking water.

            • Jo Miran@lemmy.ml
              link
              fedilink
              arrow-up
              3
              ·
              4 months ago

              If having off-grid water and power backup, along with some long term storage consumables (freeze dried and canned food) isn’t prepping, that what is your definition of prepping?

        • Jo Miran@lemmy.ml
          link
          fedilink
          arrow-up
          8
          ·
          4 months ago

          We specialize in data and system optimizations for enterprise critical applications.

          ProTip: Contest your electric bills. Most states allow you to do so and the utility company will have to provide your meter reading data to back up the bill.

          • Zorsith@lemmy.blahaj.zone
            link
            fedilink
            English
            arrow-up
            6
            ·
            4 months ago

            Is there any guarantee the utility company won’t just drop you like a rock when they’re fed up with contesting bills? (That is a serious question, most of us are locked in by utility monopolies so if that is a risk it would be borderline life ruining)

            • Flying Squid@lemmy.world
              link
              fedilink
              arrow-up
              2
              ·
              4 months ago

              I would guess that in many (or even most) areas that don’t have municipal utilities, the commercial utility is under no legal obligation to provide their service to you. Otherwise, they couldn’t shut off people’s electricity or water for non-payment.

            • Jo Miran@lemmy.ml
              link
              fedilink
              arrow-up
              4
              ·
              4 months ago

              I’m skirting really close to my NDA here but think about this. Imagine a city has ~3,000,000 active meters. Each meter polls every five minutes or so (more often if it is a gas meter). Legal retention is about seven years. Usage reports are due to market daily. Given that this is exclusively a cost, executives aren’t keen on throwing buckets of money at it. So, in this “imaginary” scenario, what are the odds that things will go smoothly?