April 20, 2021

Volume XI, Number 110

Advertisement

April 19, 2021

Subscribe to Latest Legal News and Analysis

Florida Water Hack Shows Danger of Remote Access Vulnerabilities

On February 8, 2021, Pinellas County, Florida officials announced that a hacker had remotely gained access to the City of Oldsmar’s water treatment system on two separate occasions and was able to change the setting for sodium hydroxide in the water supply. The incident highlights the danger to local government information systems and the dangers of remote access vulnerabilities.

In a press conference, the Pinellas County Sheriff, Bob Gualtieri, emphasized that the sodium hydroxide levels in the county’s water did not actually change because a water system employee noticed the change in the setting and reversed it. Sodium hydroxide is used in public water systems to prevent pipes from corroding, but it can cause skin burning and can be fatal to humans if ingested in large amounts.

Sheriff Gualtieri added that the Oldsmar water system was able to be accessed with a preinstalled piece of remote access software intended to allow “authorized users to troubleshoot any system problems from other locations.” The software, known as TeamViewer, is commonly used for remote access and IT troubleshooting.

Once they learned of the incident, the county took steps to “stop further remote access to the system” and contacted the FBI and the Secret Service to investigate.

Read the press conference about this incident.

Advertisement
Copyright © 2021, Hunton Andrews Kurth LLP. All Rights Reserved.National Law Review, Volume XI, Number 42
Advertisement
Advertisement

TRENDING LEGAL ANALYSIS

Advertisement
Advertisement

About this Author

In today’s digital economy, companies face unprecedented challenges in managing privacy and cybersecurity risks associated with the collection, use and disclosure of personal information about their customers and employees. The complex framework of global legal requirements impacting the collection, use and disclosure of personal information makes it imperative that modern businesses have a sophisticated understanding of the issues if they want to effectively compete in today’s economy.

Hunton Andrews Kurth LLP’s privacy and cybersecurity practice helps companies manage data and...

212 309 1223 direct
Advertisement
Advertisement