A cyberattack on water systems in a dozen states is exposing years of under-investment in critical infrastructure and how US adversaries can threaten services that everyday Americans take for granted, according to industry experts and current and former US officials.
The cyber intrusions in some cases led to water pressure drops and flooding at facilities, according to the FBI, but did not compromise the safety of drinking water, according to state and local officials.
US officials are now asking themselves why the hackers, who struck during a scorching heat wave, didn’t go further in causing damage at the water facilities. Manipulating devices that monitor chemical dosing, for example, could have jeopardized the safety of the drinking water.
“Do we have the C team and they couldn’t do worse?” one US official said. “How bad could it be if the A team turned to the US?”
Iran is a suspect in the hacks, but US officials have not yet confirmed Tehran’s involvement.
