Local water infrastructure secure from hacktivists

Published on September 30, 2024

After an alert concerning pro-Russia Hacktivist Activity at water systems was released last week, officials at the Los Alamos Department of Public Utilities (DPU) wish to reassure customers that its water and wastewater systems are not at risk.

The alert was released by the Cybersecurity and Infrastructure Security Agency (CISA). It said that certain internet accessible devices used in the Water and Wastewater Systems Sector, if exposed and vulnerable, may lead to exploitation or brute force attacks.

The control system used by the DPU for water and wastewater is independent of all internet connectivity. Additionally, measures are in place to maintain secure intra-system connections and communications.

“Much like two cans and a string, the machine communications and control protocols are direct connections, with no dynamic web- or ring-based connections,” said Deputy Utility Manager Clay Moseley.

These lines of communication are dedicated to the water and wastewater system controls only, which provides for a high level of security. Ironically, Moseley said, this secure structure is much like transportation and utility grid control systems in the old Soviet Union and Russia today.

For more information on the CISA alert, see “NMED: Threat Actors Continue to Exploit Water & Wastewater System Operational Technology and Industrial Control Systems” in the Los Alamos Daily Post.