{"resourceId":"fbi-epa-psa-water-plc-attacks-2026","versions":[{"version":"external-47a87326164c30d9baac85a70e8293e59bf72d7a69c6c88fd52a86418f5ac189","resource":{"id":"fbi-epa-psa-water-plc-attacks-2026","title":"Malicious Cyber Actors Targeting Water and Wastewater Sector Internet-Facing Programmable Logic Controllers, Causing Operational Disruptions","organization":"Federal Bureau of Investigation and U.S. Environmental Protection Agency","sector":"Water and wastewater operational technology","geography":"United States (utilities in at least seven states)","publishedAt":"30 Jul 2026 (Public Service Announcement)","publicationDate":"2026-07-30","eventDate":"2026-07-27","sourceName":"Federal Bureau of Investigation","sourceLabel":"Federal cyber alert (PSA)","sourceUrl":"https://www.fbi.gov/investigate/cyber/alerts/2026/malicious-cyber-actors-targeting-water-and-wastewater-sector-internet--facing-programmable-logic-controllers-causing-operational-disruptions","evidenceClass":"standards-guidance","outcomeClass":"cautionary","topics":["data-security","infrastructure"],"finding":"Since 27 July 2026, water and wastewater utilities in at least seven states reported attacks on internet-exposed Rockwell/Allen-Bradley MicroLogix 1100 and 1400 PLCs; actors changed IP addresses and passwords, causing loss of view and in some cases control, and at least one victim found modified ladder logic. Reported effects included loss of pressure and flooding. Similar third-party network setups across victims may let attackers multiply successes. FBI and EPA recommend removing PLCs from internet exposure via secure gateways, strong unique passwords, access control lists, and securing cellular modems.","sledRelevance":"Any AI analytics or optimization that reads from or writes to utility OT expands the same attack surface; this alert sets the baseline controls municipal water systems must have before connecting AI to SCADA/PLC data.","evidence":"Federal PSA based on incident reports to the FBI; specific victims and counts per state not disclosed. The companion CISA alert reported boil water notices and sustained manual operations.","architectureImplications":"OT connectivity for analytics, including AI platforms and remote vendor access, should be brokered through secure gateways with no inbound internet exposure and monitored modems.","governanceImplications":"Third-party integrators' repeated network templates are a shared risk; utilities should review integrator and vendor remote-access arrangements before adding AI vendors.","securityPrivacyImplications":"Direct: PLC tampering produced physical effects. AI projects needing OT data should not create new internet-facing paths.","caveats":"The alert does not involve AI; it is included as a security precondition for AI-in-OT work. Dated July 2026, outside the immediate news window, but the campaign is recent and the first edition for this stream has no prior security baseline.","streamIds":["utility-management"],"roles":{"sales":"Sales framing: this alert is not about AI, but it shapes every AI conversation with water utilities that touches operational data. Attackers caused pressure loss and flooding by tampering with exposed controllers, and shared integrator setups multiplied the damage. Lead with OT exposure and remote-access hygiene before proposing analytics on SCADA data. Position a readiness assessment covering exposure, vendor access and gateway design, and never suggest AI tools themselves reduce this specific risk without evidence.","engineering":"Engineering framing: before any AI or analytics platform consumes PLC or SCADA data, confirm no controller is internet-exposed, remote access goes through a monitored jump host, modems use strong authentication, and ACLs restrict traffic to expected devices. Data for analytics should leave OT through one-way or brokered paths rather than new inbound connections. A proof of value is an exposure scan plus an architecture review of one proposed analytics data flow against the FBI and EPA recommendations.","delivery":"Delivery framing: the OT or SCADA manager owns remediation, with the CISO and any system integrator. Work includes exposure discovery, password and ACL changes, gateway deployment, modem hardening, and documented manual-operation fallbacks. Governance checkpoints are integrator access reviews and sign-off before connecting new vendors, including AI platforms. Risks include undocumented integrator connections, small utilities lacking staff, and disruptions during remediation. Acceptance should be a verified zero-exposure scan and tested manual procedures."},"roleDetails":{"sales":{"customerProblem":"Water utilities have internet-exposed controllers and integrator-built remote access that attackers are exploiting.","stakeholders":["SCADA/OT manager","CISO or IT director","Utility director","System integrator"],"discoveryQuestions":["Do you know whether any PLCs are reachable from the internet?","Which third parties have remote access to OT, and how is it brokered?","How long can you run in manual operations?"],"valueHypothesis":"Closing exposure first may let utilities adopt OT analytics without adding new attack paths.","potentialEngagement":"OT exposure and remote-access assessment ahead of any AI data integration.","unsupportedClaims":["That AI tools prevent PLC tampering","Specific victim counts per state"]},"engineering":{"fit":"Mandatory precondition for any AI touching OT.","architectureIntegration":"Brokered or one-way data paths from OT to analytics environments.","prerequisites":["OT asset inventory","Network diagrams","Integrator access list"],"constraints":["Small-utility staffing","Legacy PLCs"],"security":"Remove inbound exposure, strong unique passwords, ACLs, monitored modems.","proofOfValue":["Exposure scan","Architecture review of one analytics data flow"]},"delivery":{"work":"Exposure discovery, hardening, gateway deployment and manual fallback testing.","dependencies":["Integrator cooperation","Maintenance windows"],"ownership":"SCADA/OT manager with CISO.","skillsAdoption":"Operators need refreshed manual-operation drills.","governanceCheckpoints":["Integrator access review","Sign-off before new vendor OT connections"],"acceptanceCriteria":["Proposed: verified zero internet-exposed PLCs","Proposed: tested manual operations procedure"],"risks":["Undocumented connections","Service disruption during changes"]}},"retrievedAt":"2026-10-29T22:07:04-05:00","enrichedAt":"2026-10-29T22:18:16-05:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Small systems may lack OT security staff; manual operations depend on trained operators.","procurementImplications":"Integrator and AI vendor contracts should require secure remote-access patterns and disclosure of reused network templates.","operatingModelImplications":"Treat OT security sign-off as a gate in AI project intake.","sourceVerification":{"openedUrl":"https://www.fbi.gov/investigate/cyber/alerts/2026/malicious-cyber-actors-targeting-water-and-wastewater-sector-internet--facing-programmable-logic-controllers-causing-operational-disruptions","referenceExcerpt":"Operational effects reported to the FBI have included loss of pressure and flooding.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}