Exclusive-Hack of water sector supplier draws FBI scrutiny as Iran-linked cyber concerns grow

U.S. authorities are investigating a data breach at Micro-Comm, a small Kansas-based manufacturer of water utility technology, as the FBI scrutinizes cybersecurity threats in the infrastructure sector. Despite initial reports of the attack possibly being linked to an Iranian-affiliated group targeting water plants in Minnesota and other states since July, Micro-Comm's management and the FBI have confirmed the attack to be opportunistic and not specifically targeted.

The hackers released nearly 850,000 files containing roughly 644 gigabytes of data, including PLCs used in wastewater processing facilities. Micro-Comm has emphasized that the breach doesn't compromise sensitive information or remote access capabilities, and the company urged customers to change passwords as a precautionary measure.

The incident highlights the complexity of securing local U.S. water systems and their vendors from cyberattacks, with cybersecurity experts warning of growing threats from Iranian-affiliated cyber campaigns.