Pennsylvania Water Breach

In November 2023, the Aliquippa Municipal Water Authority suffered a cyberattack targeting its wastewater management system. The attack, attributed to the hacking group Cyber Av3ngers, disrupted operations at one of the booster stations. The hackers exploited vulnerabilities in a Unitronics industrial control system used to monitor and regulate water pressure. Although the automated system was forced offline, manual operations were implemented to maintain water distribution, there was no immediate risk to public water safety.

Attackers gained access by exploiting weak default credentials on the internet exposed PLCs. A defacement message appeared on the control system's screen as part of a politically motivated attack. This breach highlights the vulnerabilities of operational technology in critical infrastructure, emphasizing the need for enhanced security measures in this realm.