CYBERSECURITYTRACKER
Permanent story citation

Dispel targets exposed PLCs and remote access risks facing small U.S. water and electric utilities

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7337

As cited

Copy frozen at (site build).

ot ics

Dispel targets exposed PLCs and remote access risks facing small U.S. water and electric utilities

Dispel launched the Community Power & Water Program to provide affordable secure remote access solutions for small U.S. water and electric utilities. The initiative responds to documented risks including a July 2026 incident affecting 30+ Minnesota municipal water utilities, where attackers exploited internet-exposed programmable logic controllers (PLCs) using default credentials and missing authentication. The program is designed for utilities with minimal cybersecurity staff, delivering deployment in a single shift without requiring infrastructure overhauls or dedicated security teams.

Why it matters: Small and mid-sized water and electric utilities face immediate risk from internet-exposed PLCs; operators need to implement controlled remote access and credential management now to prevent attackers from gaining direct access to critical infrastructure controls.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary