The U.S. government is warning state governors that foreign hackers are carrying out disruptive cyberattacks against water and sewage systems throughout the country.
The letter singled out alleged Iranian and Chinese cybersaboteurs. Sullivan and Regan cited a case in which hackers accused of acting in concert with Iran's Revolutionary Guards had disabled a controller at a water facility in Pennsylvania and called out a Chinese hacking group dubbed "Volt Typhoon" which they said had "compromised information technology of multiple critical infrastructure systems, including drinking water, in the United States and its territories."
"These attacks have the potential to disrupt the critical lifeline of clean and safe drinking water, as well as impose significant costs on affected communities," the letter said.
China's Embassy in Washington and Iran's mission to the United Nations did not immediately return a message seeking comment. Both countries have in the past denied carrying out cyberattacks
The digital safety of water and sewage plants has long been a concern for cybersecurity professionals because the facilities provide a critical service and can often be lightly defended.
The letter called on governors to "ensure that all water systems in your state comprehensively assess their current cybersecurity practices" and prepare for potential cyber incidents.
