Alderwood Water & Wastewater District (the District) was informed that a vendor called Automatic Funds Transfer Services, Inc. (AFTS) was the victim of a ransomware attack. The District contracts with AFTS to handle utility billing and the processing of paper check payments. There is no direct threat to the District’s network as a result of this incident.
The information stored in the AFTS databases is limited to data necessary to fulfill utility billing and payment processing of paper check payments. Electronic payments are processed by a different vendor who is not impacted by the incident. Breached utility billing from the AFTS database may have included the following personal information: utility bill account number, name, address, and billing amounts. Additionally, for customers who pay their utility bills by mailing a paper check, scanned copies of their paper checks are also stored on the AFTS servers which include bank account and routing information. It is unknown at this time whether these scanned copies of checks have been illicitly extricated from the network.
Customers who pay their utility bill by mailing a paper check are encouraged to monitor their bank account for unusual activity and report anything suspicious to their bank right away. The most immediate impacts to our customers are a possible delay in processing check payments or a temporary disruption in viewing a digital version of your billing statement online.
Customers who pay by check are encouraged to use one of the following methods listed below.
Alderwood Water & Wastewater District3626 156th St. SWLynnwood, WA 98087
Alderwood Water & Wastewater District takes its role of safegaurding personal information very seriously. We will continue to keep you informed as we adopt additional measures to ensure the highest level of security for personal information. For questions please contact Jeremy Walker at 206-485-1183 or email us at firstname.lastname@example.org.
The Alderwood Water and Wastewater District licensed the CodeRED Community Notification System to help disseminate important and emergency information. We encourage you to go to http://www.awwd.com/codered, or text AWWD to 99411 from your mobile phone, and enter your contact information, including additional phone numbers, and text and email addresses, to ensure all the data in our system is accurate so you can be notified in an emergency.
If you know of anyone who did not receive this information and is an Alderwood Water and Wastewater District customer, please encourage them to the Alderwood Water and Wastewater District website, or text AWWD from their mobile phone and enter their information.
If you someone does not have internet access, please have them contact a friend or family member to help add their contact information to the emergency database. You can also call Scott Eastman, our Emergency Management and Public Outreach Planner, directly at 425-741-7921 for assistance. For more information, please visit our CodeRED web page http://www.awwd.com/codered
The Alderwood Water and Wastewater District receives its water supply from the City of Everett Water Treatment Plant. The Alderwood Water and Wastewater District and City of Everett constantly monitor threats to the water supply. We are aware of the news out of Florida of a hacker’s attempt to contaminate a city’s water supply. Everett has security measures in place to protect access and control of the Water Treatment Plant system (SCADA). We are also a member of The Washington Water/Wastewater Agency Response Network (WAWARN), Washington Association of Sewer and Water Districts (WASWA), and American Water Works Association who monitor and inform members of threats against water utilities.
How does the District control remote access to its systems?
District staff monitor its system through an automated telephone interface and a physically isolated, read only interface that is not connected to the internet. Remote access is limited through Zero Trust defined perimeter hardware that limits communications at a device to device level.
What other cybersecurity protocols has the District implemented?
District staff follows the American Water Works Associations Risk Management Guidance recommendations and NIST Cybersecurity Framework.
What redundancies are in place to monitor water quality?
We have Chlorine/pH analyzers throughout the district that are visited daily as well as monitored 24-hours a day through our SCADA system. We also visit our reservoir sites during our daily Water Quality rounds.
Has the District experienced similar attacks?
No. We actively focus efforts to identify, protect, detect, and respond to cyber threats. We have a plan in place to recover our system should an attack occur.