{"id":63280,"date":"2021-02-10T11:07:48","date_gmt":"2021-02-10T19:07:48","guid":{"rendered":"https:\/\/forescoutstage.wpengine.com\/?p=63280"},"modified":"2021-04-06T14:35:33","modified_gmt":"2021-04-06T21:35:33","slug":"florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture","status":"publish","type":"post","link":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/","title":{"rendered":"Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture"},"content":{"rendered":"<p>Yesterday we learned that a cyberattack on February 5 impacted a water treatment plant in Oldsmar, Florida, which provides drinking water to nearly 15,000 residents. This is the most recent report of a significant breach targeting critical infrastructure and operational technology (OT) systems.<\/p>\n<p>The attack was thwarted in real-time by a very astute employee at the plant. While monitoring the system, the employee noticed the cursor moving on the screen and saw the levels of sodium hydroxide change from 100 parts per million to 11,100 \u2013 a potentially lethal amount. This attack comes only months after <a href=\"https:\/\/www.zdnet.com\/article\/israel-says-hackers-are-targeting-its-water-supply-and-treatment-utilities\/\" target=\"_blank\" rel=\"noopener\">Israel\u2019s water treatment infrastructure<\/a> was the target of an attack.<\/p>\n<p>Forescout published a blog in January 2020 entitled <a href=\"\/company\/blog\/5-questions-to-answer-to-improve-cybersecurity-in-water-wastewater-management\/\">5 Questions to Answer to Improve Cybersecurity in Water and Wastewater Management<\/a>, which provided guidance to the water\/wastewater community on what questions must be answered to effectively strengthen the security posture of these critical systems.<\/p>\n<p>Here are some crucial questions security leaders with these types of environments should be asking in light of this latest attack:<\/p>\n<ol>\n<li>What are our assets and where do they sit on the network?<\/li>\n<li>Which ones are controlled manually, and which ones are automated?<\/li>\n<li>Which assets are connected to the internet and can be controlled remotely?<\/li>\n<li>Where do the vulnerabilities in the system lie?<\/li>\n<li>How could a malicious actor use these vulnerabilities to enter and disrupt operations?<\/li>\n<\/ol>\n<p>The attack vector used in this incident was reportedly a remote connectivity tool, TeamViewer. With the on-going pandemic, <a href=\"\/company\/resources\/use-the-forescout-platform-for-security-and-it-operations-during-covid-19\/\" target=\"_blank\" rel=\"noopener\">secure remote access<\/a> will continue to be part of normal operations for the foreseeable future, if not indefinitely. It\u2019s imperative to implement secure remote access technologies and ensure only approved remote access conduits are leveraged by continuously monitoring for remote access communications such as VNC, telnet, SSH, RDP etc.<\/p>\n<p>Now is a good time to understand your remote access behaviors, identify potential anomalies and drive down your mean time to response to initiate an Emergency Response plan as outlined in EPA\u2019s <a href=\"\/complying-with-americas-water-infrastructure-act-of-2018\/\">American Water Infrastructure Act (AWIA)<\/a>.<\/p>\n<p>At Forescout our mission is to \u201cActively Defend the Enterprise of Things,\u201d which includes securing critical networks and devices in water\/wastewater and other critical infrastructure sectors. We are honored to work with all those who keep these vital services operational.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Yesterday we learned that a cyberattack on February 5 impacted a water treatment plant in Oldsmar, Florida, which provides drinking water to nearly 15,000 residents. This is the most recent report of a significant breach targeting critical infrastructure and operational technology (OT) systems. The attack was thwarted in real-time by a very astute employee at [&hellip;]<\/p>\n","protected":false},"author":128,"featured_media":63557,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[540],"tags":[],"coauthors":[582,641],"class_list":["post-63280","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-research-and-cyber-alerts"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture - Forescout<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture - Forescout\" \/>\n<meta property=\"og:description\" content=\"Yesterday we learned that a cyberattack on February 5 impacted a water treatment plant in Oldsmar, Florida, which provides drinking water to nearly 15,000 residents. This is the most recent report of a significant breach targeting critical infrastructure and operational technology (OT) systems. The attack was thwarted in real-time by a very astute employee at [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/\" \/>\n<meta property=\"og:site_name\" content=\"Forescout\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ForescoutTechnologies\" \/>\n<meta property=\"article:published_time\" content=\"2021-02-10T19:07:48+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-04-06T21:35:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"2134\" \/>\n\t<meta property=\"og:image:height\" content=\"1169\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Brian Proctor, Chad Elmendorf\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Forescout\" \/>\n<meta name=\"twitter:site\" content=\"@Forescout\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/\"},\"author\":{\"name\":\"Brian Proctor\",\"@id\":\"https:\/\/www.forescout.com\/#\/schema\/person\/1f5bfcddac4cb2802752629ff4f76e6a\"},\"headline\":\"Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture\",\"datePublished\":\"2021-02-10T19:07:48+00:00\",\"dateModified\":\"2021-04-06T21:35:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/\"},\"wordCount\":380,\"publisher\":{\"@id\":\"https:\/\/www.forescout.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg\",\"articleSection\":[\"Research &amp; Cyber Alerts\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/\",\"url\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/\",\"name\":\"Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture - Forescout\",\"isPartOf\":{\"@id\":\"https:\/\/www.forescout.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg\",\"datePublished\":\"2021-02-10T19:07:48+00:00\",\"dateModified\":\"2021-04-06T21:35:33+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#primaryimage\",\"url\":\"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg\",\"contentUrl\":\"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg\",\"width\":2134,\"height\":1169},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.forescout.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.forescout.com\/#website\",\"url\":\"https:\/\/www.forescout.com\/\",\"name\":\"Forescout\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.forescout.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.forescout.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.forescout.com\/#organization\",\"name\":\"Forescout Technologies, Inc.\",\"url\":\"https:\/\/www.forescout.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.forescout.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.forescout.com\/wp-content\/uploads\/2019\/01\/forescout-logo.svg\",\"contentUrl\":\"https:\/\/www.forescout.com\/wp-content\/uploads\/2019\/01\/forescout-logo.svg\",\"width\":1,\"height\":1,\"caption\":\"Forescout Technologies, Inc.\"},\"image\":{\"@id\":\"https:\/\/www.forescout.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/ForescoutTechnologies\",\"https:\/\/x.com\/Forescout\",\"https:\/\/www.instagram.com\/forescouttechnologies\/\",\"https:\/\/www.linkedin.com\/company\/forescout-technologies\",\"https:\/\/www.youtube.com\/user\/forescout1\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.forescout.com\/#\/schema\/person\/1f5bfcddac4cb2802752629ff4f76e6a\",\"name\":\"Brian Proctor\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.forescout.com\/#\/schema\/person\/image\/d6307bb440b026428143bcd5aacefe73\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/815b868840332a2903325cb5dea0c4702c4510f1fb7d6dce41d025a2019840a0?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/815b868840332a2903325cb5dea0c4702c4510f1fb7d6dce41d025a2019840a0?s=96&d=mm&r=g\",\"caption\":\"Brian Proctor\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture - Forescout","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/","og_locale":"en_US","og_type":"article","og_title":"Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture - Forescout","og_description":"Yesterday we learned that a cyberattack on February 5 impacted a water treatment plant in Oldsmar, Florida, which provides drinking water to nearly 15,000 residents. This is the most recent report of a significant breach targeting critical infrastructure and operational technology (OT) systems. The attack was thwarted in real-time by a very astute employee at [&hellip;]","og_url":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/","og_site_name":"Forescout","article_publisher":"https:\/\/www.facebook.com\/ForescoutTechnologies","article_published_time":"2021-02-10T19:07:48+00:00","article_modified_time":"2021-04-06T21:35:33+00:00","og_image":[{"width":2134,"height":1169,"url":"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg","type":"image\/jpeg"}],"author":"Brian Proctor, Chad Elmendorf","twitter_card":"summary_large_image","twitter_creator":"@Forescout","twitter_site":"@Forescout","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#article","isPartOf":{"@id":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/"},"author":{"name":"Brian Proctor","@id":"https:\/\/www.forescout.com\/#\/schema\/person\/1f5bfcddac4cb2802752629ff4f76e6a"},"headline":"Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture","datePublished":"2021-02-10T19:07:48+00:00","dateModified":"2021-04-06T21:35:33+00:00","mainEntityOfPage":{"@id":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/"},"wordCount":380,"publisher":{"@id":"https:\/\/www.forescout.com\/#organization"},"image":{"@id":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#primaryimage"},"thumbnailUrl":"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg","articleSection":["Research &amp; Cyber Alerts"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/","url":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/","name":"Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture - Forescout","isPartOf":{"@id":"https:\/\/www.forescout.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#primaryimage"},"image":{"@id":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#primaryimage"},"thumbnailUrl":"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg","datePublished":"2021-02-10T19:07:48+00:00","dateModified":"2021-04-06T21:35:33+00:00","breadcrumb":{"@id":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#primaryimage","url":"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg","contentUrl":"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg","width":2134,"height":1169},{"@type":"BreadcrumbList","@id":"https:\/\/www.forescout.com\/blog\/florida-water-treatment-facility-attack-crucial-questions-to-assess-your-current-risk-posture\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.forescout.com\/"},{"@type":"ListItem","position":2,"name":"Florida Water Treatment Facility Attack \u2013 Crucial Questions to Assess Your Current Risk Posture"}]},{"@type":"WebSite","@id":"https:\/\/www.forescout.com\/#website","url":"https:\/\/www.forescout.com\/","name":"Forescout","description":"","publisher":{"@id":"https:\/\/www.forescout.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.forescout.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.forescout.com\/#organization","name":"Forescout Technologies, Inc.","url":"https:\/\/www.forescout.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.forescout.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.forescout.com\/wp-content\/uploads\/2019\/01\/forescout-logo.svg","contentUrl":"https:\/\/www.forescout.com\/wp-content\/uploads\/2019\/01\/forescout-logo.svg","width":1,"height":1,"caption":"Forescout Technologies, Inc."},"image":{"@id":"https:\/\/www.forescout.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ForescoutTechnologies","https:\/\/x.com\/Forescout","https:\/\/www.instagram.com\/forescouttechnologies\/","https:\/\/www.linkedin.com\/company\/forescout-technologies","https:\/\/www.youtube.com\/user\/forescout1"]},{"@type":"Person","@id":"https:\/\/www.forescout.com\/#\/schema\/person\/1f5bfcddac4cb2802752629ff4f76e6a","name":"Brian Proctor","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.forescout.com\/#\/schema\/person\/image\/d6307bb440b026428143bcd5aacefe73","url":"https:\/\/secure.gravatar.com\/avatar\/815b868840332a2903325cb5dea0c4702c4510f1fb7d6dce41d025a2019840a0?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/815b868840332a2903325cb5dea0c4702c4510f1fb7d6dce41d025a2019840a0?s=96&d=mm&r=g","caption":"Brian Proctor"}}]}},"featured_media_url":"https:\/\/www.forescout.com\/wp-content\/uploads\/2021\/02\/Florida-water-hack-image.jpeg","is_file":false,"excerpt_manually_set":false,"_links":{"self":[{"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/posts\/63280","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/users\/128"}],"replies":[{"embeddable":true,"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/comments?post=63280"}],"version-history":[{"count":0,"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/posts\/63280\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/media\/63557"}],"wp:attachment":[{"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/media?parent=63280"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/categories?post=63280"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/tags?post=63280"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.forescout.com\/wp-json\/wp\/v2\/coauthors?post=63280"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}