Foreign hackers targeted and manipulated equipment at two privately owned Colorado water systems last month, according to a spokesperson for Governor Jared Polis. The utilities each serve fewer than 200 people, and the state says there was no impact to public safety or water services. The intruders changed equipment settings — disabling remote access and alarms and altering pumping cycles — and the incidents were brief, with the providers restoring control themselves and then alerting the state. The governor's office said it cannot confirm which foreign actors were involved but is aware of continuing nationwide efforts, attributed by others to an Iranian-backed group, to access drinking water and wastewater systems. The timing places the incidents after a wave of attacks on equipment at roughly 100 water entities across about a dozen states, addressed in a 21 August CISA advisory, and after an FBI statement on 30 July describing degraded water operations in earlier intrusions, including changed IP addresses and activated passwords that produced a loss of view and, in some cases, of function over connected equipment. CISA and the FBI declined to comment on the Colorado cases.

• Source article