Foreign Hackers Breach 2 Colorado Water Utilities as EPA Flags 900 Cybersecurity Flaws
Updated
Updated · Fox News · Oct 3
Foreign Hackers Breach 2 Colorado Water Utilities as EPA Flags 900 Cybersecurity Flaws
3 articles · Updated · Fox News · Oct 3
Summary
Two small Colorado water utilities were breached by foreign actors who manipulated drinking-water control equipment, the latest sign attackers are moving beyond ransomware toward operational disruption.
EPA officials said attacks on U.S. drinking water and wastewater systems have risen several-fold, with hackers increasingly targeting human-machine interfaces, PLCs and remote-control technology.
More than 900 cybersecurity vulnerabilities have been identified at water systems since 2025, including unchanged passwords, missing multi-factor authentication and critical systems exposed online without firewalls or VPNs.
More than 30 Minnesota community water systems were hit in a coordinated July attack that forced some utilities into manual or backup operations, underscoring risks for smaller operators with aging infrastructure and staffing shortages.
EPA says some utilities are fixing basic weaknesses through inspections, training and technical support, but limited incident-reporting authority leaves the agency without a full national picture as threats grow more sophisticated.