Cyber incidents targeting water and wastewater systems have raised alarm across several states. These attacks have disrupted services and revealed vulnerabilities in critical infrastructure. The FBI and the Environmental Protection Agency (EPA) issued a warning on July 30 about cyber threats aimed at these systems since July 27, 2026. At least seven states have reported disruptions, with some operations affected more severely than others.
Details from the FBI Alert
The FBI reported attacks on internet-facing Programmable Logic Controllers (PLCs). These devices are essential for monitoring and controlling industrial equipment in water and wastewater facilities. Hackers changed IP addresses and passwords, leading to a loss of monitoring and control capabilities. This resulted in problems like flooding and pressure loss.
The FBI and EPA have not specified which states were affected. They advised utilities to disconnect control systems from public internet access and enhance their cybersecurity measures.
Significant Incidents in Minnesota
Minnesota has seen more than 30 cyberattacks on its water systems this week. The situation drew attention at the national level when President Donald Trump criticized Minnesota officials. He cited these incidents as examples of cybersecurity threats to infrastructure.
Authorities are still investigating the attacks’ origins and have not publicly named those responsible.
Michigan’s Water System Breach
Michigan also reported a problem affecting its water services. A few local communities experienced attacks that mirrored the FBI’s warnings. The Department of Environment, Great Lakes, and Energy confirmed that hackers altered equipment settings at a wastewater facility.
The incident was contained, and authorities ensured that drinking water supplies were not endangered.
Rapid City’s Vulnerable Wastewater Infrastructure
Rapid City, South Dakota, revealed a cyberattack on a wastewater lift station. City officials confirmed no impact on drinking water safety. They isolated affected systems and are coordinating with law enforcement and cybersecurity experts.
Officials reassured that the city’s water supply remains safe.
California Water Incident Under Review
California encountered a cyber incident in June. Government Technology reported that Cal Water, one of the largest utilities in the western United States, initiated an investigation after a hacking group breached a customer’s account. Despite this, there was no evidence of hackers accessing internal networks or operational systems.
The company reported no service disruptions or compromise to systems managing water distribution and treatment.
Potential Links to Iranian Hackers?
Federal investigators are examining whether Iranian hackers might be behind the recent attacks. However, no official attribution has been made. Investigators are exploring alternative possibilities, including actors mimicking Iranian tactics.
The concern arises from similarities with earlier campaigns linked to Iran. The Municipal Water Authority of Aliquippa in Pennsylvania previously faced a similar attack in November 2023. This incident prompted federal warnings about vulnerabilities in water systems.
While some reports point to Iranian connections, President Trump argued against such conclusions, emphasizing that the investigation is still ongoing.
Additional States Could Be Impacted
The FBI’s warning about incidents in at least seven states suggests more states might be affected. These latest attacks underscore growing security concerns as more water systems adopt remote management technologies.
For now, authorities are investigating if the incidents in Minnesota, Michigan, South Dakota, and California are part of a coordinated campaign. Their efforts aim to identify those responsible and prevent further breaches.
For updates, readers can contact Newsweek editors.
Leave a Reply