Muscatine Power and Water

Summary

Muscatine Power and Water experienced a cybersecurity incident affecting its corporate network, prompting engagement with forensic experts to investigate the breach and restore secure operations. The utility confirmed a brief disruption to corporate business systems but stated all operations—including office, field, and power generation functions—have resumed normal activity following internal and external reviews. An ongoing comprehensive assessment is underway to determine the incident’s full scope, with assurances that protecting customer and employee data remains a priority while minimizing service impacts.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Muscatine Power and Water (MPW) identified a cybersecurity incident affecting its corporate network environment, prompting an immediate response involving forensic experts to investigate the event’s scope and consequences. The organization experienced a brief disruption to its corporate business systems during the initial phase of the incident but conducted internal and external reviews to facilitate restoration efforts. MPW confirmed that all affected business systems resumed normal operations following remediation, with no ongoing interruptions to office functions, field operations, or power generation activities. The utility emphasized maintaining service continuity throughout the incident response process, prioritizing minimal customer impact while securing its network infrastructure. No evidence suggested operational technology or critical infrastructure disruptions beyond the corporate network environment.

MPW acknowledged the incident’s significance amid increasing frequency of such events nationwide and initiated a comprehensive assessment expected to span several weeks. The organization committed to sharing additional information as the investigation progresses but confirmed business systems stabilization and full operational resumption across all departments. While forensic analysis continued, MPW reiterated its focus on safeguarding employee and customer data, system security, and data privacy protections. The utility maintained standard service delivery throughout the incident response period and directed customer inquiries to a designated email channel without reporting any data compromise or external service interruptions. Restoration efforts centered on reactivating corporate systems within a secured environment while preserving normal power and water service operations.

Sources

Sources available to members: 2 sources.