Stolen Passwords Expose US Water Providers

SpyCloud found password-stealing malware had swiped credentials from 1,787 US water and wastewater organizations, nearly two in ten providers checked. At least 250 had credentials exposing operational networks controlling pumps and water flows. One infected metering vendor leaked passwords for 167 utility companies. The research follows recent hacks on US water supplies that the government privately tied to Iran-backed hackers.