Zombie Account Let Hackers Control City Water

A security breach recently allowed hackers to seize control of a city’s water system due to an inactive account, often referred to as a “zombie account.” The incident highlights the critical oversight of not disabling accounts that belong to former employees. Such oversight can lead to severe risks for municipal infrastructure. In this case, the hackers exploited the inactive account, gaining unauthorized access and potentially impacting public safety. This breach serves as a stark reminder for organizations to tighten access control protocols and routinely audit user accounts.

Experts point out that zombie accounts often remain unnoticed, creating vulnerabilities that cybercriminals can easily exploit. The situation underscores the importance of diligently maintaining cybersecurity hygiene to protect sensitive systems. Failure to do so could invite further incidents, posing widespread public hazards. For additional details on how this incident unfolded and its implications, read the full report.

https://www.theregister.com/security/2026/05/21/zombie-user-account-let-hackers-control-the-citys-water/5243724