IT Attacks, OT Panic: Mischaracterizations of Cyberattacks on Critical Infrastructure in Public Discourse

Recent high-profile cyberattacks have raised concerns about the security of operational technology (OT) in critical infrastructure. However, many incidents attributed to compromised OT were actually attacks on traditional information technology (IT) systems. This mischaracterization distorts public perception of cyber threats and can lead to uninformed policy responses. Through case studies on Colonial Pipeline, Saudi Aramco, and Norsk Hydro, this paper examines how incidents that primarily affected IT systems can be easily mischaracterized as attacks on OT environments, exaggerating the threat to physical infrastructure. Our analysis found substantial mischaracterization of all three cases in public discourse, despite forensic evidence showing that disruptions stemmed from IT compromises rather than direct OT breaches. These misattributions have practical consequences for digital government, influencing how agencies allocate funds, coordinate responses, and build resilience. This work advocates for clearer distinctions between IT and OT, improved reporting standards, and stronger collaboration among experts, media, and government institutions.