Hacker Raises Chemicals At FL Water Plant To Dangerous Level

OLDSMAR, FL — A hacker gained access to the computer system at Oldsmar's water treatment plant in Pinellas County and increased the sodium hydroxide in the water to a "dangerous level," authorities said.

During a news conference Monday, Pinellas County Sheriff Bob Gualtieri said his deputies, along with the FBI and U.S. Secret Service, are investigating the breach. He said officials haven't determined if the hacker was in the United States or in another country.

Gualtieri said an operator noticed Friday at 8 a.m. that someone had entered the computer system he was monitoring, which controls the chemicals and other operations at the water plant.

Initially, the operator wasn't concerned because supervisors are able to access the system remotely to troubleshoot problems. Then the operator saw that someone spent about five minutes adjusting the sodium hydroxide in the water from 100 parts per million to 11,100 parts per million.

“This is obviously a significant and potentially dangerous increase. Sodium hydroxide, also known as lye, is the main ingredient in liquid drain cleaners," Gualtieri said.

The operator promptly reduced the levels of sodium hydroxide back to the normal amount before there was any impact on the water treated at the plant.

Had the operator not taken immediate action, Oldsmar Mayor Eric Seidel and City Manager Al Braithwaite said there are several failsafes in place that would have set off alarms.

“The important thing is to put everyone on notice, and I think that’s really the purpose of today is to make sure that everyone realizes that these bad actors are out there," Seidel said.

Braithwaite said the remote access program for the plant's computer system has been disabled while the city determines how the breach occurred. Additionally, the system is not connected to the city's utility billing system, so no customer data was ever at risk.

Gualtieri said there have been no similar breaches at other Tampa Bay water plants.

Local, state and federal investigators are working together to identify those responsible. Other utility providers have been informed of the intrusion, so they can take their own protective measures.