Cyberattacks Target U.S. Water Utilities in Over a Dozen States, Officials Say
Authorities report that water systems in at least twelve states experienced cyber intrusions, possibly linked to Iran-backed actors, prompting federal warnings and security recommendations.
Cyberattacks on water utilities have been reported in at least twelve U.S. states, including Michigan, Minnesota, Georgia, New Jersey and South Dakota, according to sources familiar with the investigations. In Minnesota, more than 30 community water systems were affected, while the Clayton County Water Authority in Georgia experienced a temporary drop in water pressure that led to a boil-water advisory; service was restored within hours.
Several utilities lost remote-control capabilities and had to revert to manual operation after hackers accessed pumps, valves and pressure controls. Federal agencies—including the FBI, the Environmental Protection Agency and the Cybersecurity and Infrastructure Security Agency—issued a joint alert on July 30, stating that threat actors had gained remote access to online infrastructure for water and wastewater systems in at least seven states, causing loss of monitoring and control functions.
"Water agencies were advised to disconnect their operating programs from the internet and strengthen password protections and firewalls," the agencies said.
Officials indicated that drinking water quality has not been compromised. While investigators suspect the attacks may be tied to Iran-backed groups, no formal attribution has been made.