{ "id": "cb5f569e-6367-44df-b7b6-7ae51aeba84d", "created_at": "2026-04-06T00:17:17.620636Z", "updated_at": "2026-04-10T03:25:41.223285Z", "deleted_at": null, "sha1_hash": "862b47eea13d194264b56fc8c44ae174bbf6bd31", "title": "Pennsylvania water authority hit with cyberattack allegedly tied to pro-Iran group", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 74017, "plain_text": "Pennsylvania water authority hit with cyberattack allegedly tied to\r\npro-Iran group\r\nBy Jonathan Greig\r\nPublished: 2023-11-27 · Archived: 2026-04-05 13:49:45 UTC\r\nA water authority in Pennsylvania reportedly suffered a cyberattack, prompting officials to reassure people in the\r\narea that drinking water has not been affected by the incident.\r\nThe Municipal Water Authority of Aliquippa — which serves thousands of customers in communities northwest of\r\nPittsburgh — did not respond to requests for comment but told local news outlet KDKA-TV that computer screens\r\nat a facility were plastered with a message from hacking group Cyber Av3ngers.\r\nThe outpost, which contains a collection of pumps that maintain water pressure and regulate water flow, sent an\r\nemergency notice to the main headquarters after it was attacked.\r\nLocal news outlet Beaver Countian reported that workers took the equipment offline and are using backup tools to\r\nmaintain water pressure.\r\nMatthew Mottes, the chairman of the board for the Aliquippa water authority, said alarms went off on Saturday at\r\na station located on the outskirts of town and that local police were called to investigate the incident.\r\n\"They did not get access to anything in our actual water treatment plant — or other parts of our system — other\r\nthan a pump that regulates pressure to elevated areas of our system,” he told the Beaver Countian. “This pump\r\nwas on its own computer network, separated from our primary network, and is physically miles away.\"\r\nMottes noted that the hacked system uses software or components from Unitronics, an Israeli-owned technology\r\ncompany. He reiterated that the attack had no effect on drinking water or the water supply.\r\nThe Cyber Av3ngers group has filled its social media feed with references to the leaders of Iran and has pledged to\r\nattack any entities with products or ties to Israel — already touting attacks on 10 water treatment plants in Israel.\r\nCongressman Chris Deluzio (D-PA) said he is “closely monitoring” the attack.\r\n“My office is in touch with leadership, which reports that there has been no loss of water service for folks. Federal\r\nofficials are assisting the investigation, and I remain ready to help with federal agencies. Attacks on our critical\r\ninfrastructure like water are unacceptable,” he said in a statement.\r\n“I intend to push for a full investigation here and accountability for the attackers, and I will continue the important\r\nbipartisan work on the House Armed Services Cyber, Information Technologies, and Innovation (CITI)\r\nSubcommittee to shore up America's defenses.”\r\nThe attack comes one month after Republican lawmakers and water industry companies forced the U.S.\r\nEnvironmental Protection Agency (EPA) to back off efforts to add cybersecurity to annual state-led Sanitary\r\nhttps://therecord.media/water-authority-pennsylvania-cyberattack-pro-iran-group\r\nPage 1 of 3\n\nSurvey Programs that evaluate water systems across the U.S.\r\nLawsuits against the rules were backed by two powerful industry groups — the AWWA and the NRWA — which\r\nargued that the EPA should allow utilities to create their own requirements.\r\nDespite their work in scuttling EPA efforts to better protect water systems, the groups acknowledged that\r\ncyberattacks against water utilities are increasing at an alarming rate.\r\nU.S. law enforcement agencies said ransomware gangs hit five U.S. water and wastewater treatment facilities\r\nfrom 2019 to 2021 — and those figures did not include three other widely reported cyberattacks on water utilities.\r\nNo previous article\r\nNo new articles\r\nJonathan Greig\r\nhttps://therecord.media/water-authority-pennsylvania-cyberattack-pro-iran-group\r\nPage 2 of 3\n\nis a Breaking News Reporter at Recorded Future News. Jonathan has worked across the globe as a journalist since\r\n2014. Before moving back to New York City, he worked for news outlets in South Africa, Jordan and Cambodia.\r\nHe previously covered cybersecurity at ZDNet and TechRepublic.\r\nSource: https://therecord.media/water-authority-pennsylvania-cyberattack-pro-iran-group\r\nhttps://therecord.media/water-authority-pennsylvania-cyberattack-pro-iran-group\r\nPage 3 of 3", "extraction_quality": 1, "language": "EN", "sources": [ "ETDA" ], "references": [ "https://therecord.media/water-authority-pennsylvania-cyberattack-pro-iran-group" ], "report_names": [ "water-authority-pennsylvania-cyberattack-pro-iran-group" ], "threat_actors": [ { "id": "daf2219f-08f1-44ef-9245-9a062ceff7a4", "created_at": "2023-11-08T02:00:07.120507Z", "updated_at": "2026-04-10T02:00:03.419124Z", "deleted_at": null, "main_name": "Cyber Av3ngers", "aliases": [], "source_name": "MISPGALAXY:Cyber Av3ngers", "tools": [], "source_id": "MISPGALAXY", "reports": null } ], "ts_created_at": 1775434637, "ts_updated_at": 1775791541, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/862b47eea13d194264b56fc8c44ae174bbf6bd31.pdf", "text": "https://archive.orkl.eu/862b47eea13d194264b56fc8c44ae174bbf6bd31.txt", "img": "https://archive.orkl.eu/862b47eea13d194264b56fc8c44ae174bbf6bd31.jpg" } }