FBI investigates Micro-Comm water-tech cyberattack

The Micro-Comm data breach in Olathe, Kansas is under FBI investigation, with Barracuda ransomware claiming responsibility for the attack and releasing what it says are nearly 850,000 files totaling about 644 gigabytes. Micro-Comm manufactures programmable logic controllers used to operate critical infrastructure like wastewater treatment, making the breach especially consequential for water systems. The company says the leaked data did not include passwords or data that would enable remote access to devices. Authorities describe the incident as opportunistic and not targeted at Micro-Comm specifically, while noting a broader late-July wave of PLC-focused attacks on multiple states as part of a potential ongoing campaign linked to Iran. Some reports warn of Iranian-linked activity and the risk to public utilities, highlighting the vulnerabilities in water infrastructure and the use of AI-fueled tactics against industrial control systems. The breach underscores the need for heightened security among local utilities and their vendors, as law enforcement and cybersecurity agencies coordinate responses and guidance.