Cyberattacks Target U.S. Water Providers via Stolen Credentials

• •Nearly 20% of U.S. water utilities exposed due to infostealer malware.
• •One infected device compromised credentials for 167 utility companies.
• •Recent attacks on water systems linked to Iran, but not confirmed to involve stolen passwords.

Research by SpyCloud reveals that nearly 20% of U.S. water and wastewater organizations have exposed identity data due to infostealer malware. This malware harvests passwords and session tokens, allowing attackers to bypass multi-factor authentication. The study examined over 66,000 EPA-registered systems and found 1,787 organizations with active infostealer exposure. Notably, one infected device at a metering tech provider compromised credentials for 167 different utility companies. The report highlights the risk of cascading supply chain exposure, where one breach can affect multiple organizations. While the study indicates significant vulnerabilities, it does not confirm direct links to recent cyberattacks attributed to Iran. The findings emphasize the need for improved security measures in critical infrastructure. The report also notes limitations in data representation, particularly concerning smaller utilities.