The Environmental Protection Agency has issued an enforcement alert urging water systems to take immediate action to protect the nation’s drinking water from foreign cyberattacks.
Cyberattacks against water utilities across the country are becoming more frequent and severe, the agency announced Monday.
EPA officials warn approximately 70 percent of utilities inspected by federal officials over the last year violated standards designed to mitigate cyber threats.
As nation-states including Russia and Iran have impacted water systems of all sizes, even smaller water systems are being urged to improve protection against cyber attacks.
Water systems typically rely heavily on computer software to operate treatment plants and distribution systems.
The cybersecurity waters are deficient, as those running the systems failed to change default passwords or bar system access to former employees, the EPA states in the alert.
EPA Deputy Administer Janet McCabe blasted water providers for the lackadaisical upkeep of cyber integrity.
“In many cases, systems are not doing what they are supposed to be doing, which is to have completed a risk assessment of their vulnerabilities that includes cybersecurity and to make sure that plan is available and informing the way they do business,” McCabe said.
China, Russia and Iran are “actively seeking the capability to disable US critical infrastructure, including water and wastewater,” McCabe continued. “We want to make sure that we get the word out to people that ‘Hey, we are finding a lot of problems here.'”
In January, a hack linked to a Russian “hacktivist” group caused a small Texas town’s water system to overflow.
An estimated 150,000 community water providers serve small towns and cities nationwide.
On Monday, the White House sent a letter to US governors, warning that “disabling” cyberattacks targeting water systems are underway nationwide. The White House and the EPA invited state officials to a meeting slated for Thursday to address how to improve digital defense for the thousands of utilities.
No comments:
Post a Comment