Poland says hackers breached water treatment plants, and the U.S. is facing the same threat

Poland's intelligence agency has revealed that five water treatment facilities were targeted by cyberattacks, raising fears that hackers could have seized control of critical industrial systems. Such breaches pose severe risks, including the potential to compromise the safety of the public water supply. This alarming situation extends beyond Poland, as the United States has also encountered similar threats to its water infrastructure. In 2021, an attacker gained temporary access to a water treatment facility in Oldsmar, Florida, where they attempted to dangerously increase the sodium hydroxide levels. The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have since issued warnings about the vulnerability of water utilities to foreign cyber threats. On Friday, Poland’s Internal Security Agency published a comprehensive report detailing the agency's operations over the past two years. The document highlighted multiple thwarted sabotage attempts by Russian spies and hackers targeting not only military installations but also essential infrastructure like power grids and water supplies. The report emphasized the real and immediate nature of these threats, with the potential for devastating consequences. While the report did not specifically link the recent attacks on water treatment facilities to Russian operatives, Poland has been under increasing threat from Russian cyber attackers, including a failed attempt to compromise its energy grid attributed to inadequate security measures. This incident is part of a concerning global trend, with attacks on water and energy systems becoming more prevalent. Just last month, a joint advisory from U.S. federal agencies warned that Iranian-aligned hackers are actively targeting programmable logic controllers that manage utilities in the United States. Notably, the hacking group CyberAv3ngers previously breached several water treatment facilities in Pennsylvania earlier this year, an action believed to be connected to rising tensions in the Middle East. The cyberattacks on Poland are not isolated events but rather part of a broader strategy employed by the Russian government, aimed at destabilizing Western nations. According to Polish intelligence, these cyber missions serve as tools in a larger campaign orchestrated by Putin's regime to weaken its adversaries.