Following a report last week that an Illinois water plant was hacked, both the Department of Homeland Security and the FBI have issued a statement saying that the report was false. The report came from security expert Joe Weiss, who contended that the control system for the plant was compromised, equipment was damaged, and that the hack originated in Russia. At the time, the DHS and FBI confirmed that equipment was damaged, but would not confirm that it was a result of a hack. Today, they are denying it, according to a statement received by Jeffrey Carr:
After detailed analysis, DHS and the FBI have found no evidence of a cyber intrusion into the SCADA system of the Curran-Gardner Public Water District in Springfield, Illinois.
There is no evidence to support claims made in the initial Fusion Center report - which was based on raw, unconfirmed data and subsequently leaked to the media - that any credentials were stolen, or that the vendor was involved in any malicious activity that led to a pump failure at the water plant. In addition, DHS and FBI have concluded that there was no malicious traffic from Russia or any foreign entities, as previously reported.
Weiss, meanwhile, maintains that his original report was based on information that came from the Illinois State Terrorism and Intelligence Center (STIC), and raises concerns that different government agencies are releasing conflicting reports on the incident. While those reports may be conflicting, there's a growing consensus that the industry isn't adequately prepared for a hacking attack.
Thanks to sep332 for the tip!