Rapid City Investigates Wastewater System Cyberattack

Rapid City officials are investigating a cyberattack that targeted a municipal wastewater lift station, as US authorities examine a wider campaign against water and wastewater utilities.

The city said the Rapid City wastewater attack did not disrupt wastewater operations or affect the local drinking water supply. Officials also said they quickly contained the incident and introduced additional safeguards around the affected system.

Rapid City has not disclosed how the attackers gained access or which systems they targeted. The city continues to work with federal cyber officials while the investigation moves forward.

Wastewater services continued normally

Rapid City IT Director Jim Gilbert said the city’s existing security measures worked as intended during the incident.

City staff reviewed the affected system and confirmed that wastewater operations could continue safely. They also concluded that the measures already in place protected the drinking water supply.

However, officials did not stop there. They added further security measures after consulting their partners, aiming to strengthen the city’s response to future threats.

Rapid City Public Works Director Mike Theis said the city regularly takes steps to protect essential water and wastewater infrastructure. He added that the city will continue monitoring its systems for suspicious activity.

Rapid City works with CISA

Rapid City is working with the Cybersecurity and Infrastructure Security Agency, known as CISA, on the investigation.

CISA supports critical infrastructure operators that face cyber threats, including local governments and water utilities. The agency can help organisations investigate incidents, assess risks and strengthen their defences.

Authorities have not released further technical details about the Rapid City wastewater attack. They have also not publicly linked the incident to a specific threat actor.

Gilbert confirmed that the attack has no connection to the July 5 incident that disrupted Pennington County’s government computer network. He said the two cases involved different systems and different types of activity.

Water utilities face growing cyber risks

The incident comes as US officials investigate cyberattacks against water and wastewater utilities in at least seven states.

A wider campaign reportedly hit 30 water facilities in Minnesota during the previous weekend. Authorities believe Iranian state-linked hackers may have carried out those attacks.

Rapid City has not tied its own case to that campaign. Still, the incident shows why utilities must protect the systems that support essential public services.

Water and wastewater operators increasingly rely on connected technology to monitor pumps, treatment processes and other daily operations. Cybersecurity therefore remains a key part of protecting public health and maintaining reliable services.