Manitoba's auditor general says Manitoba Hydro could be vulnerable to a cyber-attack by hackers or terrorists.

A report released this week by Carol Bellringer said a visit to four generating stations uncovered serious weaknesses in cyber-security controls.

"(It) could result in unintentional and/or inappropriate commands that could lead to equipment malfunction, causing significant risks to the health and safety of Manitobans as well as the environment," wrote Bellringer.

She made recommendations to Hydro, including identifying and mitigating risks. The Crown corporation said, for the most part, it embraces all of them and said it recognizes the importance of implementing proper cyber-security protocols.

Hydro also issued a statement about security for its customers.

"Our business systems such as email, customer billing information, online bill payment were not part of the Auditor’s report and are secure," said Hydro.