How hackers attack municipal water systems – and why the utilities are so vulnerable

On July twenty-sixth and twenty-seventh, hackers targeted more than thirty municipal water systems across Minnesota, attempting to seize control of the small computers that operate pumps and valves. Per The Conversation, the attackers accessed programmable logic controllers that were connected directly to the internet—some using nothing but the manufacturer's default password. When utilities detected the intrusions, they shut down the automated systems and operated equipment manually, keeping water flowing safely. Since then, Michigan and five other states have reported similar attacks, revealing a pattern of widespread vulnerability in this critical infrastructure. The issue: industrial control systems often run for decades without modern security protections, leaving smaller utilities especially vulnerable to attackers who simply scan for internet-connected controllers and try weak passwords.

Listen to this story

Hear this and more stories in a personalized audio briefing.

Open The Chonkerton