Lyce · Hybrid Watch

hw_67200328f0d7b843

A Russian hacker group breached Texas water facility.

The Russian military intelligence hacking operation known as Sandwortm has been linked to a string of recent attacks on critical infrastructure including a water system in Texas. Sandworm is suspected to be connected to another Russian hacktivist group CARR. The hackers on January 18 posted a splashy video to telegram that targeted water tanks in Muleshoe, appearing to use human-machine interface to turn on the pumps. In February city officials confirmed the overflow, although it did not cause any service disruptions.

Occurrence
2024-01-18
Publication
2024-01-18T21:09:08Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
US
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2024-01-18T21:09:08Z

    The Russian military intelligence hacking operation known as Sandwortm has been linked to a string of recent attacks on critical infrastructure including a water system in Texas. Sandworm is suspected to be connected to another Russian hacktivist group CARR. The hackers on January 18 posted a splashy video to telegram that targeted water tanks in Muleshoe, appearing to use human-machine interface to turn on the pumps. In February city officials confirmed the overflow, although it did not cause any service disruptions.