(TLP:CLEAR) WaterISAC Notification – Important Note Regarding Leaked Information

Summary: We are messaging you this evening because we are aware that WIRED published an article this afternoon, “A Leaked Memo Ties Cyberattacks on Minnesota Water Utilities to Iran” (attached below) naming WaterISAC as the source of a “leaked memo.” The “memo” in question is related to the Minnesota water cyber activity and was shared on Monday to WaterISAC members only as TLP:AMBER. We want to be clear that WaterISAC did not leak this report.

Likewise, we want to emphasize that we value and safeguard all information shared with us from you and our partners and have been explicit and transparent in our information sharing guidelines (TLP) and take this matter very seriously. Additionally, we are asking WIRED to clarify/correct their article to state that they did not obtain the report from WaterISAC.

Given the importance of this issue and in protecting further information sharing, we are including the link to (TLP:CLEAR) WaterISAC’s Traffic Light Protocol (TLP) Information Sharing Guidelines for your convenience.

Questions? Please contact us at an*****@*******ac.org or 866-H2O-ISAC.

– The WaterISAC Team