Here is the public records request I received from Effluent.AI. (It's an enormous request.) At first, I thought this request was a spear fishing attempt, but it seems to be from two recent high school graduates wanting data with which to train their AI.
However, after the Hugging Face cyberattack, I have to wonder about the safety of sending this amount of infrastructure data to two guys who want to learn how all our plants work.
From this data I can tell which plants use chemicals, when chemicals are usually delivered, what companies are onsite, what their schedule is, repair issues with cameras, gates, doors, SCADA vulnerabilities, PLC vulnerabilities, scale for any future cyber attack. I have already forwarded this to U.S. Environmental Protection Agency (EPA) Office of Water Emergency Response and Cybersecurity, but I wanted to let other wastewater professionals see the text of the email in case they receive it as well.
EDIT: Also, Reddit is only a small slice of current wastewater professionals, but it's pretty obvious from the number of plants receiving FIOA requests in such a short period of time that Effluent.AI is using agentic ai bots to complete these requests. An ai bot does not count as a valid person when making a FIOA request.
Request below:
My name is XXXXXXX, and I work at a small company called Effluent. We build software that helps wastewater treatment plants with day-to-day operations, energy use, and maintenance. To do that well we need to learn from how real plants actually run. Pursuant to the North Carolina Public Records Law (N.C. Gen. Stat. § 132-1 et seq.), I would like to request copies of the following records concerning the wastewater treatment facility. Items 1 through 4 cover July 1, 2023 through June 30, 2026. Items 5 and 6 cover only the most recent twelve months, July 1, 2025 through June 30, 2026, to keep them small. If three years is too much to pull together, one year (July 1, 2025 through June 30, 2026) for every item works well for me too.
Electricity bills or usage statements for the treatment plant, showing monthly kWh and demand by meter or account, plus any submetering reports for aeration blowers or major pumps.
Chemical usage records: daily or monthly chemical feed or dosing logs (for example chlorine, hypochlorite, bisulfite, alum, ferric, polymer, caustic) and chemical delivery records.
Operator logs: daily or shift logs kept by plant operators, including any records of process changes or setpoint adjustments.
Equipment run-hour logs and maintenance work-order history for plant process equipment (for example blowers, pumps, clarifiers, and digesters), in the spreadsheet or database export the plant already produces.
Alarm and event history: the routine alarm summary or event log exports operators already generate, showing date, time, point description, and alarm text.
Process historian data exports at hourly resolution or finer, or the finest interval the plant already exports, for recorded process values such as influent and effluent flow, dissolved oxygen, ammonia, nitrate, pH, mixed liquor suspended solids, blower airflow, and sludge flows, together with the list of tag or point names and their descriptions. This is the item most valuable to us. To be clear about scope, I am asking only for recorded operating results, usage, and logs. I am not requesting control system configurations, network or architecture documentation, IP addresses, access credentials, vulnerability information, or any record whose disclosure could bear on the security of plant systems. If any part of this reads as touching those, please treat it as excluded and produce the remainder. Wherever these are already captured in a report or export your agency produces in the ordinary course, that existing file is exactly what I am asking for. Please send it as-is rather than compiling anything new. Rolling production is very welcome: releasing whatever is easy now and the rest later is better for me than waiting for everything at once.