Stolen passwords expose U.S. water providers to hackers, researchers warn

Security researchers warn today that stolen passwords are exposing U.S. water providers to hackers, according to TechCrunch. TechCrunch reports the exposure raises urgent concerns for critical infrastructure as utilities increasingly depend on remote access, cloud dashboards, and internet-connected controls. Compromised credentials can give attackers a direct path into billing, operations, and monitoring networks, potentially enabling sabotage or data theft, researchers told TechCrunch.

Researchers cited evidence of leaked and reused logins tied to water and wastewater entities circulating online and shared across third-party vendor portals, per TechCrunch. TechCrunch says weak authentication practices and credential reuse are key factors, and some systems appear reachable from the public internet without additional safeguards. Watch for federal advisories, disclosures from utilities, regulatory guidance, and any signs of attempted intrusions as the scope becomes clearer, per TechCrunch. [Developing. This article will be updated.]