Micro-Comm ransomware attack draws FBI scrutiny over water-sector risk

On 26 August 2026, reporting revealed that the FBI was scrutinizing a ransomware attack on Micro-Comm, Inc., an industrial-automation company based in Olathe, Kansas, that supplies water and wastewater control systems, control panels, micro-controllers and SCADA software. The attention came against a backdrop of heightened concern over intrusions targeting the U.S. water sector.

Micro-Comm discovered the breach on 31 July 2026, and the Barracuda ransomware group subsequently listed the company on its leak site, claiming to have stolen nearly 850,000 files totaling roughly 644 GB of data, with a ransom demand starting around $30,000. The group's file listing reportedly referenced specific government customers — including local governments and a U.S. military facility — along with employee information and product diagrams. Micro-Comm said sensitive user credentials and remote-access information had not been compromised.

What happened

What set this incident apart from the 2026 attacks on individual water utilities is that the victim is a supplier of the technology used to operate water infrastructure, rather than an operator itself. That supply-chain position is what drew federal interest: stolen product diagrams and customer references could, in the wrong hands, aid reconnaissance against downstream water and wastewater systems.

Why it matters

The Micro-Comm breach highlights the systemic risk in operational-technology supply chains serving critical infrastructure. Compromising a single control-systems vendor can yield sensitive technical detail about many utilities at once, making OT suppliers a high-value target even when their direct ransom demands are modest.