Stolen passwords are exposing America’s water providers to hackers

https://techcrunch.com/wp-content/uploads/2026/09/glen-canyon-dam-2290782874-getty.jpg?resize=1200,818

New security research has found that well over a thousand U.S. water and wastewater providers are exposed to hacks due to malware that’s capable of stealing their employees’ passwords and active logged-in sessions.

The findings by cybersecurity defense firm SpyCloud underscore how water providers and other critical infrastructure can be compromised with relative ease amidst a wave of hacks targeting the water supplies of dozens of communities across the United States.

While password-stealing malware is not new, the research highlights how stolen passwords offer hackers an easy route to break into an organization’s network without using AI tools.

SpyCloud said it built a database of more than 66,000 public-facing systems that are registered with the U.S. Environmental Protection Agency, amounting to 10,000 organizations. The company found password-stealing malware had swiped passwords and credentials from 1,787 organizations, or nearly two in ten providers they checked. The firm noted at least 250...

Copyright of this story solely belongs to techcrunch.com. To see the full text click HERE

Read more