A cyberattack stopped one of Brown City, Michigan’s municipal wells from producing water for about two hours after attackers changed its network address through a cellular connection.
Public Works Foreman Mike Vislosky restored Well No. 3 after the change interrupted production, according to the city’s Aug. 10 council minutes. Sanilac County News reported details of the incident Aug. 26.
City Manager Kyle Harris told council members the attackers could switch the well pumps on and off but did not gain deeper access. He warned that even that access could damage motors or other equipment and reduce the city’s available water supply.
Brown City added safeguards to its well systems and hired Pierson Ferdinand to review the response and the protections in place.
The review includes whether UIS, the city’s system-control vendor, was taking appropriate protective steps. The minutes say UIS had not responded to Harris’s inquiries at the time.
The FBI and Environmental Protection Agency warned July 30 that attackers were targeting internet-connected controllers at water and wastewater utilities in at least seven states. The agencies said attackers had changed device addresses and passwords, causing some operators to lose monitoring or control.
Chip in once
If this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.
Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone.
UIS also supported water systems in two other Michigan communities hit by cyberattacks this summer. A July 27 attack in Alpena Township disrupted remote monitoring, while Algonac records say attackers targeted cellular modems that communicate with remote controllers at its water plant.
No public agency has linked the three incidents or said UIS was breached. Brown City has not been identified as one of the utilities covered by the federal warning.
The well returned to service without physical damage, according to city officials. Brown City has not disclosed when the attack occurred or what equipment was involved. The city did not respond to a request for comment.
