WaterISAC is pleased to introduce the start of a new resource on our website, Cybersecurity Incident Case Studies. Thanks to the generosity of four utilities that were willing to share their experiences anonymously, we have begun a collection of incident descriptions that can help all water and wastewater utilities learn from others’ difficult situations and improve their own cybersecurity. These case studies are intended to provide succinct descriptions of what took place at the utility. Each case study includes a brief overview, a description of events that include technical details if available, the impact to the utility, the utility’s response, and the lessons learned.
-
#001: Ransomware – 2021, SCADA, Source Water Change and Grab Sample Increase
-
#003: Ransomware – 2021, SCADA, Switched to Manual and Increased Operator Rounds
-
#004: Ransomware – 2022, SCADA, Brief Impact but Quick Recovery with Standby SCADA Computer
We plan to expand the collection over time and welcome any utility that wants to share their experience to contact us. Please email analyst@waterisac.org with any information, experiences, or questions.
