Kemuri Water Company

Verizon's 2016 Data Breach Digest documented an intrusion at the pseudonymous 'Kemuri Water Company', where attackers exploited an internet-facing payment application that shared infrastructure with the OT network and altered chemical-treatment setpoints. The water utility's automated alarms and hourly monitoring caught the changes before any contaminated water reached customers.

No public health impact. The intruders altered PLC values affecting flow rate and chemical dosing four times during the incident; each change was detected and reverted within an hour. Verizon described it as a near-miss with significant potential consequence.