FBI Investigates Cyber Breach at Water Tech Firm Amid Rising Threats

The FBI is delving into a significant cyber incident at Micro-Comm, a Kansas-based provider of water utility technology, highlighting escalating threats to U.S. water infrastructure. This breach, occurring on July 31, was not linked to an ongoing Iranian-affiliated campaign targeting water plants in several states since July, yet it emphasizes the vulnerabilities facing local water systems.

Micro-Comm, based in Olathe, specializes in programmable logic controllers (PLCs) used in wastewater management. The ransomware group Barracuda has claimed responsibility for the attack, asserting that their motives are purely financial. On August 6, the group released nearly 850,000 corporate files, amounting to approximately 644 gigabytes of data.

Despite the breach, Micro-Comm co-owner Jim Cote reassured that no sensitive information, such as customer passwords, was compromised, as this data is securely stored by clients. The company has reported that any sensitive information within the leaked files was encrypted. The FBI confirmed that this incident was an opportunistic attack and not a targeted assault on Micro-Comm.

Cybersecurity experts note that the leak, while not disrupting any water facility operations, could provide potential insights for malicious actors in the future. The incident comes in the wake of warnings issued by the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) regarding threats to PLCs from major manufacturers like Rockwell Automation and Siemens.

Source: www.independent.co.uk