WTF: A hacker tried to remotely poison a Florida city's water supply

Thankfully, everyone is OK.
 By 
Jack Morse
 on 
WTF: A hacker tried to remotely poison a Florida city's water supply
And just a touch of lye. Credit: ambar del moral / mashable

Gulp.

The Florida city of Oldsmar was on alert Monday after authorities revealed that someone — it's not at present clear who — remotely accessed the local water treatment plant and attempted to dump dangerous amounts of chemicals into the water supply. According to Pinellas County Sheriff Bob Gualtieri, who detailed the apparent attack in a Monday press conference, the hacker was able to take control of a computer at the facility and subsequently increase the sodium hydroxide (aka lye) levels to a hundred times what they should be.

"The computer system was set up with a software program that allows for remote access, where authorized users can troubleshoot system problems from other locations," explained Gualtieri.


You May Also Like

It was this system, which Reuters reporter Chris Bing confirmed was TeamViewer, which apparently granted the hacker access to the water treatment controls. The hacker changed the sodium hydroxide levels from 100 parts per million to 11,100 parts per million, according to Gualtieri, who also noted that sodium hydroxide is the main ingredient in liquid drain cleaner.

The first intrusion reportedly took place around 8 a.m. local time on Friday morning, and the second one — where the changing of the lye levels happened — went down later that day around 1:30 p.m. Thankfully, according to Gualtieri, a plant operator saw the computer mouse moving, and undid the changes before any damage could be done.

"The public was never in danger," Gualtieri explained. "Right now we do not have a suspect identified, but we do have leads that we're following."

In 2013, Wired reported that many industrial control systems — and even hydroelectric plants — were left open to outsiders via the internet. This is an ongoing problem. In 2017, security researchers discovered that some ships' satellite antenna systems were likewise exposed to the internet.

SEE ALSO: Former ADT employee admits he watched customers have sex for years through their cameras

"The important thing is to put everyone on notice," Oldsmar Mayor Eric Seidel said at the press conference.

Consider yourself warned.

Topics Cybersecurity

Mashable Image
Jack Morse

Professionally paranoid. Covering privacy, security, and all things cryptocurrency and blockchain from San Francisco.

Mashable Potato

Recommended For You
I tried the Even Realities G2, the most subtle pair of smart glasses you can buy in 2026
portrait of even realities g2 smart classes held in hand at ces 2026

How to watch Mississippi State vs. Florida online for free
Rueben Chinyelu of the Florida Gators grabs a rebound

'Pokémon Pokopia': How to get the Suck ability to move water around
Ditto in Pokemon Pokopia

Anthropic challenges Department of War designation as AI dispute escalates
Anthropic logo on mobile device

I tried Neurable’s brain-sensing headphones at CES
Pair on headphones sitting on a clear glass head bust

Trending on Mashable
NYT Connections hints today: Clues, answers for April 3, 2026
Connections game on a smartphone

Wordle today: Answer, hints for April 3, 2026
Wordle game on a smartphone

What's new to streaming this week? (April 3, 2026)
A composite of images from film and TV streaming this week.


NYT Strands hints, answers for April 3, 2026
A game being played on a smartphone.
The biggest stories of the day delivered to your inbox.
These newsletters may contain advertising, deals, or affiliate links. By clicking Subscribe, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up. See you at your inbox!