How could Russia's military intelligence infrastructure campaign affect the Los Angeles Department of Water and Power?
LADWP could face operational disruption from targeted industrial control system attacks The campaign, directed by Russia's military intelligence agency, targets critical civilian infrastructure using weak or default credentials on internet-facing industrial control systems (ICS). These systems control physical processes like water pressure and refrigeration. If exploited, as seen in incidents like the Tureby water pump failure or the meatpacking facility near Los Angeles, the attack could cause measurable physical damage, such as bursting pipes or altering essential service settings, directly impacting LADWP's ability to provide water and power.
- Effect
- Strong negative
- How direct
- Stated in the reporting
- When
- Within weeks
- The story
- No new developments lately
How it reaches Los Angeles Department of Water and Power
-
A water pump in Tureby, Denmark, was remotely manipulated via an internet-facing industrial control interface, causing pressure surges that burst underground pipes and cut water to 450 homes. This incident is part of a documented two-year campaign of physical sabotage across Western infrastructure. Two groups directed by Russia's military intelligence agency, Cyber Army of Russia Reborn and Z-Pentest, are using weak credentials on industrial control systems to cause physical damage to Western utilities.
The full event1independent outlet -
The campaign, run by groups like Z-Pentest, moves beyond simple website disruptions to cause measurable physical damage to Western infrastructure. The mechanism requires only two things: a device running VNC on port 5900 visible to the public internet, and a weak or default password. This vulnerability allows attackers to remotely zero out pressure settings or alter control settings in systems that manage physical processes.
1 report connects these two. Brind only summarizes; follow a link to read the reporting itself.
- techtimes.com Oct 29
-
public electric and water utility serving Los Angeles, California
Everything about Los Angeles Department of Water and Power
Tap any step to see the evidence behind it.
The facts so far
As reported. Each one links to where it comes from.
- The campaign targets water utilities, food processing plants, factories, and waste treatment infrastructure across four countries, including Denmark and the United States.techtimes.com
- In November 2024, hackers near Los Angeles shut down refrigeration at a meatpacking facility, spoiling over 2,000 pounds of meat.techtimes.com
- The technical mechanism requires only a device running VNC on port 5900 and a weak or default password.techtimes.com
- The Tureby attack in Denmark involved remote access to a water pump control interface, leading to burst underground mains and cutting water to 450 homes.techtimes.com
Why it matters
The risk to LADWP is existential because it operates critical infrastructure—water and power—which are the lifeblood of a major metropolitan area. The campaign is not theoretical; it is a documented, two-year strategy of deliberate physical sabotage across civilian life, demonstrating a clear intent to maximize disruption rather than pursue a single strategic objective.
This threat is amplified by the technical simplicity of the attack. Security researchers note that even if the actors are unsophisticated, the more they probe poorly defended systems, the more probable it is they will find something critical that was not protected well. The campaign has already demonstrated its reach from Denmark to California, showing the vulnerability of utilities globally.
What we don't know yet
- Are LADWP's industrial control systems currently subject to the same weak or default credential vulnerabilities documented in the campaign?
- What specific defensive measures, if any, has LADWP implemented against remote ICS exploitation?
What would change this answer
Who else could feel it
Other possible ripples from the same event.
- NATOLikelyRussia's cyber sabotage campaign raises threat level for NATO
- Los Angeles City CouncilPossibleLos Angeles City Council may face pressure to increase oversight after cyber attacks
- Motorola SolutionsPossibleCyber attacks on critical infrastructure may increase demand for Motorola Solutions
- European CommissionPossibleThe documented attacks on European infrastructure may force the European Commission to mandate new security standards.
Reporting
- techtimes.comOct 29
Keep going
Brind's analysis is written by AI from the reporting linked above and can be wrong. This explainer is a possibility worth considering, not a forecast: steps marked as Brind's reasoning are not stated in the reporting. It is not investment advice; do your own research.