Regulatory updates

Volt Typhoon infiltrated Massachusetts utility

March 17, 2025

A recent case study by industrial cybersecurity firm Dragos has revealed that the Chinese state-sponsored hacking group, Volt Typhoon, infiltrated the networks of the Littleton Electric Light and Water Departments (LELWD), a small public utility in Massachusetts, for over 300 days. The breach, discovered in November 2023, traced back to February 2023, during which the hackers collected sensitive information on operational technology (OT) systems. This incident underscores the persistent and sophisticated cyber-espionage efforts targeting U.S. critical infrastructure by advanced threat actors like Volt Typhoon. ​

Learn more

Categories

• Breach
• CMMC
• CMS
• Third-party
• Vulnerability

Recent Posts

[CMMC DIB Readiness Updates

Oct 6, 2025](/content/regulatory-updates/f/cmmc-dib-readiness-updates/index.html)

[eSIM security flaw

Jul 14, 2025](/content/regulatory-updates/f/esim-security-flaw/index.html)

[Third-party breach affects Scania

Jun 18, 2025](/content/regulatory-updates/f/third-party-breach-affects-scania/index.html)