Cyberattack Targets Brown City Water System, Prompting Security Overhaul
Brown City, Michigan, has strengthened security on its water infrastructure following a cyberattack that disrupted operations at Well #3 earlier this month. According to City Manager Kyle Harris, hackers potentially based outside the U.S. exploited the cellular network to alter the well’s IP address, temporarily halting water production for several hours. Public Works Foreman Mike Vislosky restored control before any physical damage occurred, but the incident prompted immediate security upgrades.
The attack aligns with a broader wave of cyber intrusions targeting water systems across Michigan and at least six other states this month. Hackers reportedly locked out operators by altering critical system data, though authorities have not confirmed which municipalities were affected. U.S. intelligence agencies suspect Iran as a primary actor behind the attacks.
To address the breach, Brown City retained the law firm Pierson Ferdinand, specializing in municipal cybersecurity, for up to $5,000 significantly less than the $17,000–$20,000 quotes from security firms. The firm will oversee communications with the vendor whose system was compromised and ensure that Team UIS, the city’s infrastructure support provider, implements necessary safeguards.
Harris emphasized the risks of further intrusion, noting that while hackers could only toggle well pumps on and off in this case, such actions could damage motors or other components, leading to costly repairs and water shortages. Nearby communities, including Croswell, Lexington, Deckerville, Marlette, and Sandusky, reported no similar attacks, though some, like Lexington, rely on manual backups for resilience. Croswell has already upgraded its software protections.
Source: https://sanilaccountynews.com/articles/brown-city-beefs-up-water-security/
Brown City Community Schools cybersecurity rating report: https://www.rankiteo.com/company/brown-city-community-schools
"id": "BRO1787718411",
"linkid": "brown-city-community-schools",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"{'affected_entities': [{'industry': 'Water supply and treatment',
'location': 'Brown City, Michigan, USA',
'name': 'Brown City Water System',
'type': 'Municipal water utility'}],
'attack_vector': 'Cellular network exploitation',
'description': 'Hackers exploited the cellular network to alter the IP '
'address of Well #3 in Brown City, Michigan, temporarily '
'halting water production for several hours. The attack '
'prompted immediate security upgrades to the water '
'infrastructure.',
'impact': {'downtime': 'Several hours',
'operational_impact': 'Temporary halt in water production',
'systems_affected': 'Well #3 water production system'},
'initial_access_broker': {'entry_point': 'Cellular network'},
'lessons_learned': 'Risks of further intrusion could lead to physical damage '
'(e.g., motor damage, water shortages) and costly repairs. '
'Importance of manual backups and software protections.',
'post_incident_analysis': {'corrective_actions': 'Security upgrades, vendor '
'system review, legal '
'consultation',
'root_causes': 'Exploitation of cellular network '
'to alter system IP address'},
'recommendations': 'Implement enhanced security measures for critical '
'infrastructure, including software upgrades and vendor '
'system reviews.',
'references': [{'source': 'City of Brown City announcement'}],
'response': {'containment_measures': 'Restoration of control by Public Works '
'Foreman Mike Vislosky',
'remediation_measures': 'Security upgrades to water '
'infrastructure, vendor system review',
'third_party_assistance': 'Pierson Ferdinand (law firm '
'specializing in municipal '
'cybersecurity), Team UIS '
'(infrastructure support provider)'},
'threat_actor': 'Suspected Iranian state-sponsored actors',
'title': 'Cyberattack on Brown City Water System',
'type': 'Cyberattack',
'vulnerability_exploited': 'Alteration of system IP address'}