Federal Agencies Warn of Cyberattacks on Water Systems Across Multiple States
Federal authorities, including the FBI and the Environmental Protection Agency (EPA), have issued warnings about a series of cyberattacks targeting water and wastewater systems in at least seven states since July 27, 2026. These attacks have caused operational disruptions and exposed vulnerabilities in critical public services. The cyber actors targeted internet-facing Programmable Logic Controllers (PLCs), which are essential for monitoring and controlling industrial equipment at these facilities. The attacks have led to issues such as flooding and pressure loss in affected systems. Federal officials have urged water utilities to enhance their cybersecurity measures by removing exposed control systems from the public internet. The states affected have not been fully disclosed, but incidents have been reported in Minnesota, Michigan, South Dakota, and California. 
