Russian hacking group claims responsibility for cyberattack on Indiana wastewater plant | StateScoop<\/title> <meta name=\"description\" content=\"A video from the "People's Cyber Army of Russia" claims responsibility for last week's cyberattack on the Tipton West Wastewater Treatment Plant in Indiana.\"> <link rel=\"canonical\" href=\"https:\/\/statescoop.com\/russian-cyberattack-wastewater-tipton-indiana\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Russian hacking group claims responsibility for cyberattack on Indiana wastewater plant | StateScoop\"> <meta property=\"og:description\" content=\"A video from the "People's Cyber Army of Russia" claims responsibility for last week's cyberattack on the Tipton West Wastewater Treatment Plant in Indiana.\"> <meta property=\"og:url\" content=\"https:\/\/statescoop.com\/russian-cyberattack-wastewater-tipton-indiana\/\"> <meta property=\"og:site_name\" content=\"StateScoop\"> <meta property=\"article:published_time\" content=\"2024-04-25T20:18:07+00:00\"> <meta property=\"article:modified_time\" content=\"2024-04-25T20:23:13+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg\"> <meta property=\"og:image:width\" content=\"2000\"> <meta property=\"og:image:height\" content=\"1250\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"sfoxsowell\"> <meta name=\"twitter:card\" content=\"summary_large_image\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"StateScoop \u00bb Feed\" href=\"https:\/\/statescoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"StateScoop \u00bb Comments Feed\" href=\"https:\/\/statescoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/statescoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1712700738g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/statescoop.com\/wp-content\/mu-plugins\/search\/elasticpress-next\/dist\/css\/related-posts-block-styles.min.css?m=1713212140g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/statescoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1712858261g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=74528d75ce0daeb8628a\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/statescoop.com\/wp-json\/\"><link rel=\"alternate\" type=\"application\/json\" href=\"https:\/\/statescoop.com\/wp-json\/wp\/v2\/posts\/63925\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/statescoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.5.2\">\n<link rel=\"shortlink\" href=\"https:\/\/statescoop.com\/?p=63925\">\n<link rel=\"alternate\" type=\"application\/json+oembed\" href=\"https:\/\/statescoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fstatescoop.com%2Frussian-cyberattack-wastewater-tipton-indiana%2F\">\n<link rel=\"alternate\" type=\"text\/xml+oembed\" href=\"https:\/\/statescoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fstatescoop.com%2Frussian-cyberattack-wastewater-tipton-indiana%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/cropped-ss_favicon.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/cropped-ss_favicon.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/cropped-ss_favicon.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/cropped-ss_favicon.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-63925 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/statescoop.com\/russian-cyberattack-wastewater-tipton-indiana\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--event js-stickybar\">\n<div class=\"stickybar__details\" readability=\"5.1428571428571\">\n<div class=\"stickybar__info js-sticky-bar-content\" readability=\"32\">\n<p>Voting is now open for the 2024 StateScoop 50 Awards.<\/p>\n<\/div>\n<p> <a class=\"stickybar__link button button-tertiary\" href=\"https:\/\/statescoop.com\/statescoop50\/\">Vote now.<\/a> <\/div>\n<p> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"23.85\">\n<div class=\"single-article__header-content\" readability=\"29.532203389831\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/statescoop.com\/news\/county-local\/\"> <span>County & Local<\/span> <\/a> <\/li>\n<\/ul>\n<p> A video from the “People’s Cyber Army of Russia” claims responsibility for last week’s cyberattack on the Tipton West Wastewater Treatment Plant in Indiana. <\/p>\n<\/p><\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"400\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant.jpg?resize=640%2C400&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt=\"water lid\" decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg 2000w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg?resize=300,188 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg?resize=768,480 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg?resize=1024,640 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg?resize=1536,960 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg?resize=600,375 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg?resize=269,168 269w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg?resize=539,337 539w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg?resize=1080,675 1080w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-2.jpg?resize=1349,843 1349w\" sizes=\"(max-width: 1080px) 100vw, 1080px\"><figcaption> (Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"33.994557000302\"><body readability=\"69.142033165105\"><\/p>\n<p>A video by a Russian hacking group claiming responsibility for last week\u2019s cyberattack on Tipton West Wastewater Treatment Plant in Indiana surfaced on social media Thursday. It\u2019s evidence of the latest cyberattack by nation state cybercriminals targeting water facilities in small towns across the United States.<\/p>\n<p>The \u201cPeople\u2019s Cyber Army of Russia\u201d took credit last Saturday for the incident on the messaging app Telegram. A message accompanying the video read: \u201cWe continue to look partially cover our series of work on US infrastructure. Today, we\u2019ll look at Indiana. Let\u2019s consider the work on municipal water treatment plants. Enjoy watching, friends.\u201d<\/p>\n<p>The group has also claimed responsibility for a <a href=\"https:\/\/twitter.com\/Cyberknow20\/status\/1748139362104361021\/video\/2\">January cyberattack <\/a>on a water facility in Texas, which caused a tank to overflow.<\/p>\n<p>Other Russian hacking groups, such as <a href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/apt44-unearthing-sandworm\">Sandworm<\/a>, the cyberwarfare unit of Russia\u2019s military intelligence service, have also been conducting cyberattacks on water treatment facilities across the U.S. in recent months.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>The cyberattack in Tipton, which provides wastewater treatment for roughly 5,000 people in a town 40 miles north of Indianapolis, began disrupting operations on Friday evening. Plant managers sent employees to correct the activity, which interrupted operations again on Sunday morning, according to Jim Ankrum, general manager of Tipton Municipal Utilities.<\/p>\n<p>\u201cAt that time, we were notified that we had been hit with a cybersecurity attack,\u201d Ankrum told StateScoop on Thursday.<\/p>\n<p>He described the disruptions to the plant\u2019s operations as minor and said the town\u2019s drinking water was never in jeopardy.<\/p>\n<p>\u201cWe maintained plant operational capability throughout [the incident] and were able to continue to accept wastewater flows and free even with the disruptions,\u201d said Ankrum.<\/p>\n<p>Last month, the Biden Administration issued a <a href=\"https:\/\/cyberscoop.com\/epa-water-threats-governors\/\">warning<\/a> to state governments and industry leaders that local water systems and other critical infrastructure are especially vulnerable to cyberattacks.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Ankrum said the water utility uses third-party vendors to support its cybersecurity measures and does not have its own internal IT staff.<\/p>\n<p>\u201cWe all do receive intermittent training,\u201d Ankrum said. \u201cIt\u2019s mostly things that come across our emails, you know, don\u2019t click on this and all the things you\u2019ve probably been trained on.\u201d<\/p>\n<p>He said the agency will review its security measures and improve cybersecurity after the investigation, which he said is being led by the Department of Homeland Security\u2019s Cybersecurity and Infrastructure Security Agency.<\/p>\n<p>\u201cWe will review our processes and see where we can make improvements for sure,\u201d he said. \u201cWhen you\u2019re under attack, you find out where your vulnerabilities are.\u201d<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.5413533834586\">\n<div class=\"author-card\" readability=\"13\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/04\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant-1.jpg?w=640&ssl=1\" alt=\"Sophia Fox-Sowell\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Sophia Fox-Sowell<\/h4>\n<p> Sophia Fox-Sowell reports on artificial intelligence, cybersecurity and government regulation for StateScoop. She was previously a multimedia producer for CNET, where her coverage focused on private sector innovation in food production, climate change and space through podcasts and video content. She earned her bachelor\u2019s in anthropology at Wagner College and master\u2019s in media innovation from Northeastern University. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Modernization<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Cybersecurity<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to StateScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/statescoop.com\/russian-cyberattack-wastewater-tipton-indiana\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Russian hacking group claims responsibility for cyberattack on Indiana wastewater<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[78],"tags":[86],"class_list":["post-3268","post","type-post","status-publish","format-standard","hentry","category-cybersecurity","tag-cybersecurity"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity\/\" rel=\"category tag\">Cybersecurity<\/a>","tag_info":"Cybersecurity","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3268","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=3268"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3268\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=3268"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=3268"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=3268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":3268,"date":"2024-04-25T16:56:33","date_gmt":"2024-04-25T21:56:33","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=80258"},"modified":"2024-04-25T16:56:33","modified_gmt":"2024-04-25T21:56:33","slug":"russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/04\/25\/russian-hacking-group-claims-responsibility-for-cyberattack-on-indiana-wastewater-plant\/","title":{"rendered":"Russian hacking group claims responsibility for cyberattack on Indiana wastewater plant"},"content":{"rendered":"