Actions
- <a href="https://twitter.com/intent/tweet?url=https://www.tmj4.com/news/local-news/in-your-community/milwaukee-county/cybersecurity-expert-explains-cyber-threats-facing-wisconsin-water-systems&text=Cybersecurity%20expert%20explains%20cyber%20threats%20facing%20Wisconsin%20water%20systems” rel=”nofollow noopener” target=”_blank”>Tweet
Cybersecurity expert explains cyber threats facing Wisconsin water systems
PrevNextCybersecurity expert Alex Holden says Wisconsin utilities are facing growing cyber threats after hackers disrupted water operations in neighboring Minnesota. Officials say there are no confirmed compromises in Wisconsin.
By:Mike Beiermeister
, Photojournalist Ariel Campos
Posted
and last updated
MILWAUKEE — Cybersecurity expert Alex Holden says Wisconsin utilities are facing growing cyber threats after hackers disrupted water operations in neighboring Minnesota. Officials say there are no confirmed compromises in Wisconsin
Federal and Wisconsin officials are warning water utilities to secure critical infrastructure systems after cyber incidents in neighboring Minnesota disrupted water operations and raised concerns about vulnerabilities in utility control systems
PREVIOUS COVERAGE |Sweeping cyberattack on water systems in multiple states has officials on edge
The Wisconsin Department of Natural Reilities warning of “ongoing malicious activity” targeting programmable logic controllers, or PLCs — small industrial computers used to help manage pumps, pressure and water flow inside utility systems
The alert follows incidents in Minnesota where federal officials say hackers targeted internet-connected control systems tied to water operations
“Control over our critical infrastructure, especially like our water supply, is paramount to us,” said Alex Holden, chief information security officer for Hold Security
Cybersecurity expert explains cyber threats facing Wisconsin water systems
In a joint public warning issued Thursday, the FBI and Environmental Protection Agency said malicious cyber actors have targeted internet-facing Programmable Logic Controllers used by water utilities in at least seven states. Federal officials said some incidents led to operational disruptions, including pressure loss and utilities switching to manual operations
The Cybersecurity and Infrastructure Security Agency, or CISA, also warned of a “significant increase” in cyber actors targeting PLCs used by water and wastewater systems
Holden said internet-exposed industrial control systems remain a concern
‘They are just sitting open on the internet, exposing their internal configurations,’ Holden said
Mike Beiermeister
Federal officials are urging utilities to remove internet-exposed operational technology systems, strengthen passwords and review remote access controls
Despite the warnings, Wisconsin officials say there are currently no confirmed compromises involving Wisconsin water systems
“The DNR will continue to coordinate messages to systems as warranted as further information becomes available,” a DNR spokesperson said in a statement to TMJ4 News
Milwaukee Water Works told TMJ4 it is aware of heightened cybersecurity concerns and is actively monitoring its systems. The utility said it remains confident its systems are secure
The Milwaukee Metropolitan Sewerage District also said it is closely monitoring its systems and remains in regular contact with Homeland Security
Federal and state advisories specifically reference Allen-Bradley PLCs made by Milwaukee-based Rockwell Automation
In a statement to TMJ4, Rockwell Automation said it is working with customers, partners and government agencies regarding reports of unauthorized cyber activity and disruptions at some utilities
“Rockwell Automation takes the security of its products and solutions seriously,” the company said
Holden said internet-exposed industrial control systems remain a concern
“These are internal components, and our water supply should be handled on closed circuits and really segregated controls away from the internet,” Holden said
Federal officials are urging utilities to remove internet-exposed operational technology systems, strengthen passwords and review remote access controls
Officials stressed there is currently no indication Wisconsin drinking water has been impacted
Let’s talk:
Hey there! At TMJ4 News, we’re all about listening to our audience and tackling the stuff that really matters to you. Got a story idea, tip, or just want to chat about this piece? Hit us up using the form below. For more ways to get in touch, head over to tmj4.com/tips.
It’s about time to watch on your time. Stream local news and weather 24/7 by searching for “TMJ4” on your device
Available for download on Roku, Apple TV, Amazon Fire TV, and more
Submit a news tip
Report a typo
