A Close Call in Oldsmar, Florida

In February 2021, the city of Oldsmar, Florida—a community of approximately 15,000 residents—faced a chilling cyber threat that could have had catastrophic consequences. An unidentified hacker infiltrated the city's water treatment facility's computer system via a remote access software called TeamViewer. Once inside, the intruder attempted to increase the amount of sodium hydroxide (lye) in the water supply from the standard 100 parts per million to a hazardous 11,100 parts per million. Sodium hydroxide is used to control water acidity but can be toxic at high levels.

Discovery and Immediate Response

A vigilant plant operator noticed the cursor on his screen moving independently, accessing the controls for chemical levels. Recognizing the potential danger, he promptly reversed the changes, averting a disaster. Even though multiple safety mechanisms were in place to detect such anomalies, this incident highlighted a significant vulnerability in the system's cybersecurity defenses.

The Aftermath and Financial Implications

While the immediate threat was neutralized, the breach prompted a comprehensive investigation by federal and state authorities, including the FBI and the Secret Service. The city had to invest in upgrading its cybersecurity infrastructure, conducting thorough system audits, and implementing stricter access controls. Although specific remediation costs were not publicly disclosed, such overhauls can easily amount to hundreds of thousands of dollars, a substantial burden for a small municipality.

So, What Went Wrong?

The system was wide open.

• No firewalls. No cybersecurity monitoring.
• No multi-factor authentication (MFA) on remote access.
• All employees shared the same password.

An entire community almost drank toxic water because a small-town utility didn’t think hackers would ever target them.

Could This Be You?

If your business connects anything to the internet—billing systems, inventory, even water pumps—you’re fair game for cybercriminals. There is no such thing as “too small to hack.” Hackers love easy targets because they make the biggest impact with the least effort.

Lessons Learned

This incident serves as a stark reminder that no organization is too small to be targeted. The attack exploited weak remote access protocols and inadequate monitoring, underscoring the necessity for:

• Regular cybersecurity assessments and audits.
• Implementation of multi-factor authentication for remote access.
• Continuous monitoring of system activities.
• Employee training to recognize and respond to potential cyber threats.

Lesson? Lock Your Digital Doors Before Someone Burns the House Down.

📄 To learn more about protecting your assets, check out our Cybersecurity Protection Guide – Be prepared before an attack happens.

🔒 Schedule Your Cybersecurity Consultation – We’ll help you secure your business with a personalized plan.