Though a planned indictment for the breach of back-office computer systems at the Bowman Avenue Dam in Rye Brook, New York, has been reported, it was only part of a hacking campaign that was broader than previously known, as the indictment will show, the sources said.
The dam breach coincided roughly with a spate of distributed denial of service attacks in 2012 that hit more than a half dozen U.S. financial institutions and the two episodes were long suspected of being connected. Cyber security experts have said these, too, were perpetrated by Iranian hackers against Bank of America, JPMorgan Chase, Capital One, PNC Financial Services and SunTrust Bank.
In the intrusion of the dam computers, the hackers did not gain operational control of the floodgates, and investigators believe they were attempting to test their capabilities.
The hackers who were expected to be named in the indictment all reside in Iran, one source said.
The Justice Department declined to comment.