Foreign Actors Manipulated Controls at Two Colorado Water Utilities

Foreign actors breached two privately owned Colorado water utilities in late August and manipulated equipment used to control their drinking-water systems, according to Governor Jared Polis’ office, as reported by Axios. Each utility serves fewer than 200 people. The attackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles.

The disruptions were brief and officials said there was no known impact on water treatment, water quality or public safety. State officials have not identified the utilities or determined who was responsible, although they described the attackers as foreign actors. The available report does not explain the evidence supporting that assessment. It also provides no details of specific vulnerabilities, malware or how access was obtained.