PLC safety logic bypassed at Sage Water Resources facility
Public report preview
At Sage Water Resources' Duchesne, Utah, saltwater-disposal facility, an attacker altered PLC safety logic on March 15, 2026, bypassing shutdown protections and leaving pumps running dry while the control system showed normal operation. A truck driver spotted the mismatch; workers shut down automation, continued receiving wastewater under manual control, and avoided pump failure, service interruption and environmental harm. Sage said a contractor rebuilt and verified the safety logic and restored continuous operation within days.
- Organization
- Location
Recent incident intelligence
Paid member report preview
Unlock the complete incident report
New reports are available immediately to Sustainers, after 2 weeks to Supporters, and to everyone once they are more than 1 month old.
Sustainers help fund the research and verification behind the Cyber Incident Registry while receiving immediate access to new reports.
See something that needs correction?
Signed-in members can report an error, update, or missing source.