Dark Perimeter: "The Water Siege"

In late July 2026, more than 30 community water systems in Minnesota were hit in a coordinated cyberattack that spread within a week to at least seven states. Operators were locked out of their own plants, utilities dropped to manual operation, and boil-water notices went out across the Midwest. In this Breach Files episode, Cole Drayden walks through what actually happened while it is still unfolding: internet-exposed Rockwell Allen-Bradley PLCs, attackers changing passwords and, in at least one case, rewriting the ladder logic itself so that a password reset leaves the compromise running underneath. Plus the attribution question, the CyberAv3ngers / Iran-IRGC pattern going back to Aliquippa in 2023, why investigators are keeping a false-flag possibility open, and four concrete things every OT defender should do tonight. No contamination was reported and the water is safe. Cole makes the case for why that is good news we did not earn. Facts as reported by CISA, the FBI, the EPA, and major outlets as of early August 2026. Known facts, suspicions, and open questions are kept distinct throughout. Dark Perimeter: Security, AI, and the Edge of What is Coming.Support the show