Colorado’s Water Intrusions Changed Control Settings
Two privately owned water suppliers in Colorado reported intrusions during late August. Intruders disabled alarms and remote access, changed equipment settings and altered pump timing. Each served under 200 people. Officials reported no known effects on treatment, water quality, supply or public safety. Providers responded quickly; officials checked recovery, offered help and alerted peers.
Officials alleged attacks from abroad without naming a country or group. Neither report discloses product, entry route or indicators. No statewide takeover was established. Small teams, ageing equipment and maintenance demands can complicate remote support; size does not diminish safe water’s importance.
- Map supplier logins, cellular links, VPNs, remote desktops and shared support accounts.
- Export alarms, settings, authentication and engineering history before rebuilding.
- Have operators compare schedules, thresholds and alerts with approved configurations.
- Contain suspect connections while retaining safe local control and visibility.
- Scope exposure and preserve evidence before rotating credentials and certificates.
- Rehearse safe manual running without remote management.
The governor’s statement appeared on 18 September 2026.
