A cyberattack caused minor operational disruption at Tipton’s wastewater plant in Indiana in April 2024, requiring staff intervention. The plant continued receiving and releasing wastewater, and drinking-water service was not reported at risk; a Russian-speaking group’s claim remains separate from confirmed attribution.
Unauthorized access to systems, accounts, networks, or data.
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Services remained available but with reduced performance, reliability, functionality, capacity, or responsiveness.
Electric, water, wastewater, gas, telecommunications, or other utility operations were materially affected.
Staff or users had to rely on paper, telephone, in-person, offline, or other manual processes.
Available evidence indicates that no extortion demand, threat, communication, or related pressure tactic was identified.
Tipton Municipal Utilities in Indiana experienced minor operational disruption at its West wastewater treatment plant April 19, 2024, with a recurrence April 21. Staff intervened while the plant continued operating.
Utility manager Jim Ankrum’s account to StateScoop establishes two episodes of interference and a staff response. He described the disruption as minor and said drinking water was not in jeopardy. CNN’s April 22 report, published by KTVZ, also carries his acknowledgment that the utility was targeted, while saying it had not been compromised. That wording limits the confirmed scope; it does not erase his acknowledgment of a cyber incident and operational effects.
Employees were dispatched to correct the activity. Indiana’s environmental regulator told WTHR that staff detected irregular activity through standard process monitoring and quickly switched the West plant to manual control. The regulator reported no adverse treatment issues and said the main wastewater treatment plant and drinking-water plant were unaffected. Ankrum said the facility retained its ability to receive wastewater throughout the incident, and Kaspersky’s later review recounts continued acceptance and release of flows. The evidence supports limited interference with wastewater operations, rather than loss of treatment capability or drinking-water delivery.
The utility’s provision of electricity and other services does not establish that those services were affected. Its city office at 210 S. Main St. is distinct from the targeted West plant on County Road 560 West. The latest specifically dated interference remains April 21; an investigation described April 25 does not extend that operational timeline.
Cyber involvement and minor operational disruption are well supported. A video attributed to Cyber Army of Russia Reborn reportedly claimed interaction with software controlling aeration and fluid movement. The manager told CNN he had not watched it. The reported video’s claimed control actions have not been independently authenticated. General links between the channel and Russian intelligence do not establish who directed this Tipton event.
No ransomware, extortion demand, data theft or confirmed data alteration is established. The utility’s statement that it was targeted but not compromised is retained alongside its reported operational disruption.
The entry method, exact control changes and final investigative outcome remain unresolved. Continued plant operation is not proof of a precise technical remediation date. Presumed-resolved status and an unknown operational end are retained pending a positive final recovery finding. The reported April 20 claim predates CNN’s April 22 account of management’s acknowledgement.
Contemporary reporting describes an April 20 video in which the group claimed interaction with Tipton wastewater systems. The claimed control actions remain unverified. The utility confirmed minor operational effects and continued treatment, without establishing every actor allegation or Russian government direction.
The affected utility’s wastewater service remit includes Tipton and served surrounding communities. Staff used manual control at the West plant without adverse treatment effects; the incident did not establish drinking-water disruption.
Tipton is the city containing the affected utility’s office at 210 S. Main St. The targeted West wastewater plant is separately identified on County Road 560 West; the city office location does not establish that the plant lies within city limits. The wastewater service area is represented separately. No citywide water outage is established.
Ankrum acknowledged targeting and minimal disruption while operations continued; federal authorities were investigating and the manager had not watched the claimed attack video.
Utility manager acknowledged targeting and minimal disruption while the plant remained operational; claimed control manipulation was not independently confirmed.
Indiana’s environmental regulator reported that staff shifted the West wastewater plant to manual control; treatment remained safe and the other treatment plants were unaffected.
Manager describes two minor operational interruptions April 19 and 21 with staff intervention; treatment capability was maintained and drinking water was not in jeopardy.
Retrospective Tipton section describes April 19 and 21 minor disruptions, employee correction and continued wastewater flows; the actor’s video remains a reported claim.
Signed-in members can report an error, update, or missing source.
