Connecticut intelligence and emergency officials have begun notifying water and wastewater operators across the state after federal authorities identified a string of cyber intrusions that disrupted utilities in at least seven states, according to state officials.
Rapid warnings in lieu of a master inventory
The Connecticut Intelligence Center sent technical information to water systems describing the affected devices, internet addresses investigators flagged as suspicious and a list of recommended protections, said Evan Allard, director of the center.
"I don't think it's a concern," Allard said when asked about Connecticut's lack of a centralized inventory of controllers used by water and wastewater systems.
State officials say no Connecticut water system has reported an attempted or successful intrusion tied to the campaign. Still, the absence of a statewide inventory means the state cannot say how many systems operate the specific equipment identified by federal agencies or how many operators have implemented the recommended security measures.
What federal investigators say
The FBI and the Environmental Protection Agency have described attackers remotely accessing internet-facing Rockwell Automation products — specifically Allen-Bradley MicroLogix 1100 and 1400 programmable logic controllers — changing controller internet addresses and passwords, and causing operators to lose monitoring or control capabilities.
Those outages translated into different outcomes at affected utilities depending on what each controller managed and whether workers could shift to manual operation: some systems experienced flooding, others saw a loss of water pressure.
State coordination with federal partners
Connecticut officials said the state relied on an intelligence-sharing network that connects federal agencies, state offices and water providers to move information quickly. The Connecticut Intelligence Center worked with the federal Cybersecurity and Infrastructure Security Agency to distribute a bulletin that included corrective actions and mitigation guidance.
The state Department of Emergency Services and Public Protection issued a brief statement saying, "At this time, DESPP is not aware of any impact in Connecticut after the cyberattacks on water systems in the United States."
Attribution and scope
Federal investigators have said the activity was likely linked to actors affiliated with Iran who have previously targeted operational technology in sectors such as water, energy and telecommunications. State officials did not elaborate on operational details of the attribution or on any ongoing investigative steps.
Connecticut's approach, Allard said, depends less on maintaining a master list of every controller in the state than on being able to rapidly disseminate warnings and to ensure individual operators know how to assess and address their own risks.
What this means for operators and residents
While no Connecticut systems have reported impacts, the incident underscores the vulnerability of operational technology when devices are directly accessible from the internet. State officials encouraged water system operators to review the bulletin and follow federal guidance supplied through the intelligence-sharing network.
- State agencies distributed technical indicators and mitigation advice to water providers.
- Authorities urged operators to verify whether they are using the affected controllers and to apply the recommended protections.
- No confirmed Connecticut impacts have been reported to date.
Given the potential for varied consequences depending on the controlled equipment and contingency procedures at each facility, state and federal officials emphasize vigilance and prompt remediation when vulnerabilities are identified.
| Affected device | Reported consequence |
|---|---|
| Allen-Bradley MicroLogix 1100 | Loss of monitoring/control; possible flooding or pressure loss |
| Allen-Bradley MicroLogix 1400 | Loss of monitoring/control; possible flooding or pressure loss |
Officials stopped short of publishing technical fixes in public statements, citing operational-security practices. But they reiterated that quick information-sharing among federal, state and local partners was central to Connecticut's response.
As state and federal agencies continue to track the situation nationally, Connecticut water systems have been put on alert to review network exposure and to apply the corrections and safeguards outlined in federal advisories.
Marcus Feldman, WE NEWS state correspondent.
