Threat of Counterfeit PLCs
Last week, the New Hampshire Department of Environmental Services issued an alert about a counterfeit Rockwell Automation PLC identified at a NH municipal water utility. Read the bulletin from NHDES here.
Water and wastewater systems should be aware that counterfeit operational technology is increasingly available online and these devices pose safety and security risks. You are encouraged to check that your PLCs and other devices are authentic, and always purchase devices from verified suppliers or manufacturers.
If you identify any possible counterfeit PLCs at your utility, please reach out Ryan McLiverty at the Vermont Intelligence Center (ryan.mcliverty@vermont.gov), Adam Gamelin at the Cybersecurity & Infrastructure Security Agency (adam.gamelin@cisa.dhs.gov), and alert your local FBI office or report on ic3.gov.
Security Reminders
Take some time every few months to strengthen your system’s physical and cybersecurity!
- Use strong, unique passwords. Your password should be at least 15 characters long and should not be used on any other accounts.
- Learn to identify and avoid phishing emails, texts, and calls.
- Update devices and software to the latest version.
Find more tips and free resources at vtruralwater.org/cybersecurity
2026 Conference & Trade Show
Thursday, May 14 • 8 am to 3 pm
Lake Morey Resort • Fairlee, VT
Registration is now open for Vermont Rural Water’s 2026 Conference! The event features a trade show, luncheon, and training classes (earn up to 3.5 TCH for water and/or wastewater) on Thursday, May 14 at Lake Morey Resort. There will be a golf tournament on May 13.