Iranian hackers infiltrated computers of small dam in New York state, report says
PUBLISHED : Tuesday, 22 December, 2015, 12:54pm
UPDATED : Tuesday, 22 December, 2015, 12:57pm
Reuters in Washington
The Bowman Avenue Dam in Rye, New York, is a 6-metre-high concrete slab. Photo: Google Earth
Iranian hackers breached the control system of a dam near New York City in 2013, an infiltration that raised concerns about the security of the country’s infrastructure, the Wall Street Journal reported on Monday, citing former and current US officials.
Two people familiar with the breach told the newspaper it occurred at the Bowman Avenue Dam in Rye, New York. The small structure about 32km from New York City is used for flood control.
The hackers gained access to the dam through a cellular modem, the Journal said, citing an unclassified Department of Homeland Security summary of the incident that did not specify the type of infrastructure.
The dam is a 6-metre-tall concrete slab across Blind Brook, about 8km from Long Island Sound.
“It's very, very small,” Rye City Manager Marcus Serrano told the newspaper. He said FBI agents visited in 2013 to ask the city’s information-technology manager about a hacking incident.
The dam breach was difficult to pin down, and federal investigators at first thought the target was a much larger dam in Oregon, the Journal said.
The breach came as hackers linked to the Iranian government were attacking US bank websites after American spies damaged an Iranian nuclear facility with the Stuxnet computer worm.
It illustrated concerns about many of the old computers controlling industrial systems, and the White House was notified of the infiltration, the Journal said.
The newspaper said the United States had more than 57,000 industrial control systems connected to the Internet, citing Shodan, a search engine that catalogues each machine.
Homeland Security spokesman S.Y. Lee would not confirm the breach. He said the department’s 24-hour cybersecurity information-sharing hub and an emergency response team coordinate responses to threats to and vulnerabilities in critical infrastructure.
