A cyberattack on Micro-Comm, a small water utility technology provider based in Olathe, Kansas, has drawn FBI scrutiny amid broader concerns over Iran-linked cyber threats to U.S. water systems. The ransomware group Barracuda claimed responsibility for the breach, posting nearly 850,000 company files totaling 644 gigabytes of data online on August 6. Micro-Comm discovered the incident on July 31 and notified customers on August 8, stating the attack involved limited malware and encrypted sensitive information.
Federal authorities have since investigated the breach, with the FBI’s Kansas City field office and the Cybersecurity and Infrastructure Security Agency (CISA) assessing the scope of the intrusion. Micro-Comm co-owner Jim Cote emphasized that the exposed data did not include sensitive credentials or remote-access details for its devices, which are stored by customers. The company also asserted that the breach was unrelated to recent reports of water system hacks.
The incident unfolded against a backdrop of heightened cyber threats targeting critical infrastructure. On July 30, the FBI and CISA issued a joint warning about hackers targeting programmable logic controllers (PLCs) from Rockwell Automation, Schneider Electric, and Siemens in states including Minnesota. CISA later noted on August 19 that attackers were leveraging artificial intelligence to facilitate attacks on Siemens equipment. Cybersecurity researcher Tom Hegel of SentinelOne cautioned that while the leaked data did not immediately compromise operational systems, it could provide long-term intelligence to malicious actors.
Censys, an internet-monitoring firm, reported that roughly 200 of Micro-Comm’s SCADAview CSX systems used in U.S. states were accessible online, though the company did not confirm whether these were directly exploited in the breach. The FBI described the attack as an opportunistic incident not specifically targeting Micro-Comm, aligning with broader concerns over state-sponsored cyber campaigns.
