My favorite part about this hack is the fact that the initial attack vector was PHPMyAdmin. Really?<p>I know SCADA systems used by the electric utilities are required to adhere to security guidelines defined by NERC-CIP (Critical Infrastructure Protection), and I'd be shocked if there weren't massive violations of whatever the water utility equivalent is.