Cybersecurity Breach at Kansas Water Utility Tech Firm Exposes Critical Infrastructure Risks US authorities are investigating a data breach at Micro-Comm, a small Kansas-based manufacturer of programmable logic controllers (PLCs) used in wastewater processing facilities. The attack, confirmed by the FBI and the company, was claimed by the ransomware group Barracuda, which posted nearly 850,000 files (644 GB) on August 6, though it denied government affiliation, citing financial motives. The breach occurred in late July, coinciding with a separate Iranian-linked cyber campaign targeting PLCs in Minnesota and at least six other states. While Micro-Comm’s incident was unrelated to those attacks, it underscored vulnerabilities in local water systems and their supply chains. The FBI and CISA had previously warned on July 30 about hackers targeting PLCs from Rockwell Automation, Schneider Electric, and Siemens, with CISA later reporting on August 19 that attackers were leveraging AI to exploit Siemens equipment. Micro-Comm, based in Olathe, Kansas, discovered the breach on July 31. Co-owner Jim Cote stated that the leaked files did not contain sensitive credentials or remote access data, as such information is stored by customers. The company notified clients on August 8, assuring them that the malware attack was limited and that encrypted data remained secure. The FBI described the breach as opportunistic, not targeted, and advised customers to update passwords as a precaution. According to Censys, roughly 200 of Micro-Comm’s SCADAview CSX systems remain exposed online. Leaked files, reviewed by cybercrime researchers, included government customer details, employee names, and product diagrams, potentially aiding future attacks. SentinelOne’s Tom Hegel noted that while no water systems were operationally compromised, the exposed data could be exploited in long-term cyber threats. The incident highlights ongoing risks to critical infrastructure vendors, even those not directly tied to state-sponsored campaigns.