What happened

Actors operating as CyberAv3ngers compromised a Unitronics Vision series programmable logic controller at a booster station of the Municipal Water Authority of Aliquippa, taking the station out of automatic control and defacing the operator screen with a political message stating that Israeli-made equipment was a target. Entry required no sophisticated exploit — the devices were exposed to the internet on their default programming port with default or weak passwords, including the factory default '1111'. CISA, the FBI, NSA, EPA and Israel's INCD issued joint advisory AA23-335A after confirming further Unitronics compromises across US water and wastewater facilities in multiple states. Water utilities are outside this map's usual scope; the record is kept because the same actor, tooling and exposure pattern reappear in the 2026 campaign against US energy and water control systems. The marker is placed at Aliquippa.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.