

Disclosures about an industry’s security practices – or lack of them – can reveal weaknesses that other hackers might exploit, and revelations about negligent security can embarrass companies or government agencies and raise civil liabilities. Hacking investigations routinely take place under utmost secrecy. If we're fighting nation states, we're never going to win every battle, but there are some simple things we can do with regards to passwords, dual-factor authentication, things like that, that will limit the ability for bad actors to get access to some of those systems.” “We need to get the word out better on how to prevent these things.

“Some of the security measures were extremely lax that led to that incident,” he said. Swearingen said he was limited in what he was willing to say in such a public forum. “Human lives could have been lost." She asked for "additional intel, or tell us where else you might be looking?"

"God forbid, that was not caught at that time, that would have been disastrous,” Fried said. He was responding to questions from Florida Attorney General Ashley Moody and Agricultural Commissioner Nikki Fried. Swearingen told the governor and his Cabinet that he could not say much publicly about the water plant hacking, but his comments about two-factor authentication provided important clues about what happened behind the scenes in the high-profile case. Investigators previously said the plant was using widely available remote-control software, TeamViewer, shared a common password that allowed remote access to control computers and did not employ routine defensive technologies such as firewalls. That appeared to confirm that the water plant in the town of Oldsmar wasn't using the security technology, which has been widely available for years. Swearingen said his agency was promoting two-factor authentication – in which knowing a password alone is not enough to log into computers – to frustrate hackers. The criminal investigation continues in the case. The head of the Florida Department of Law Enforcement, Rick Swearingen, provided the unexpected update on the mysterious sabotage effort during a Cabinet meeting in Tallahassee. Ron DeSantis and other state leaders Tuesday that "extremely lax" security at a municipal water plant northwest of Tampa allowed hackers to break into its computers to try to poison residents earlier this year. A top Florida law enforcement official told Gov.
