Explore

Cyberattacks on U.S. Water Systems Suspected to be Linked to Iran-Backed Hackers

Cyberattacks on U.S. Water Systems Suspected to be Linked to Iran-Backed Hackers

Cyberattacks on water systems in at least 12 U.S. states, including Michigan, Minnesota, Georgia, New Jersey, and South Dakota, have been reported, with federal investigators suspecting Iran-backed hackers. These attacks have resulted in the loss of monitoring and control functionality in some systems, forcing operators to switch to manual mode. The FBI, Environmental Protection Agency, and Cybersecurity and Infrastructure Security Agency have issued warnings and advised water agencies to disconnect their systems from the internet and enhance security measures. The tactics used resemble those of the CyberAv3ngers, a group linked to the Iranian Revolutionary Guard.

Iranian Hackers Target U.S. Water Systems Using Default Passwords

Iranian Hackers Target U.S. Water Systems Using Default Passwords

Hackers, suspected to be aligned with Iran, attempted to breach at least 30 municipal water systems in Minnesota on July 26-27, 2026. Similar cyberattacks have been reported in Michigan, New Jersey, and other states. The attackers targeted small computers controlling pumps and valves, rather than the main utility office computers. Utilities responded by shutting down control computers and manually operating equipment, ensuring water safety. The U.S. government has not officially attributed the attacks to any group, but the methods align with typical international cyberattack strategies.

Hackers just broke into America’s tap water

Hackers just broke into America’s tap water

Iran almost certainly hacked into water systems in a dozen states. How scared should you be?

Iranian Hackers Target U.S. Water Systems, Exploiting Default Passwords

Iranian Hackers Target U.S. Water Systems, Exploiting Default Passwords

Hackers, suspected to be aligned with Iran, attempted to breach at least 30 municipal water systems in Minnesota on July 26-27, 2026. Similar cyberattacks have been reported in Michigan, New Jersey, and other states. The attackers targeted small computers controlling equipment like pumps and valves, crucial for delivering drinking water. Utilities responded by shutting down control computers and manually operating equipment, ensuring water safety. The U.S. government has not officially attributed the attacks to any group, but the methods align with typical international cyberattacks. The incidents highlight vulnerabilities in the U.S. water infrastructure, particularly the use of default passwords in internet-connected systems.

Cyberattack Targets New Jersey Water Systems, Affects Seven States

Cyberattack Targets New Jersey Water Systems, Affects Seven States

A cyberattack has targeted at least two water systems in New Jersey, affecting utilities across seven states. The FBI and EPA issued a warning about hackers targeting internet-connected industrial control devices used by water and wastewater utilities. The New Jersey Cybersecurity and Communications Integration Cell is working with federal partners to address the incidents, which involved vulnerable internet-exposed control systems. Despite the attack, there was no disruption to water services, as staff quickly shifted to manual operations. The identities of the affected utilities have not been disclosed.

Cybercriminals Target Metro Atlanta Water Supply in Suspected Infrastructure Attack

Cybercriminals Target Metro Atlanta Water Supply in Suspected Infrastructure Attack

The Clayton County Water Authority in Georgia is investigating a suspected cyberattack on its water supply system. Initially reported as a boil water advisory, the incident is now believed to be part of a larger cyber campaign targeting water infrastructure across the United States. The focus of the investigation is on programmable logic controllers (PLCs), which are critical for controlling water system equipment. Georgia Tech cybersecurity experts have identified thousands of vulnerable controllers nationwide, raising concerns about potential exploitation by malicious actors. The FBI has issued an alert warning of ongoing threats to operational technology devices used by critical infrastructure operators, including water systems.

The Columbus Dispatch

Columbus water systems unaffected by cyberattacks across the country

Columbus water systems unaffected by cyberattacks across the country

Cyberattacks have targeted water systems in several states. Columbus officials say they have not detected suspicious activity or other issues.

Cyberattacks Target New Jersey Municipal Water Systems, Iran Suspected

Cyberattacks Target New Jersey Municipal Water Systems, Iran Suspected

Two municipal water systems in New Jersey were targeted by cyberattacks, with Iran suspected as the perpetrator. The attacks temporarily disabled automated systems, forcing the utilities to switch to manual operations. Despite the disruption, there was no interruption in water service, and both systems have since been secured with enhanced access controls. The New Jersey Cybersecurity and Communications Integration Cell, along with federal partners, is investigating the incidents, which involved vulnerabilities in internet-exposed control systems. The attacks are part of a broader pattern affecting water utilities across multiple states.

Cyberattacks on U.S. Water Systems Expand to 12 States, Including South Dakota

Cyberattacks on U.S. Water Systems Expand to 12 States, Including South Dakota

Water utilities across at least 12 states, including South Dakota, have reported cyberattacks on their operational technology, with the campaign allegedly linked to Iranian hackers. The Cybersecurity and Infrastructure Security Agency (CISA) has issued advisories warning that these attacks target internet-connected operational technology devices, such as programmable logic controllers (PLCs). The FBI has noted that since July 27, water and wastewater utilities in several states have experienced disruptions. In Georgia, the Clayton County Water Authority confirmed a temporary disruption in its systems, leading to a precautionary boil water advisory, which has since been lifted. The attacks have resulted in operational challenges, including boil water notices and manual operations.

Cyberattacks on Water Systems Extend Beyond Minnesota to Multiple States

Cyberattacks on Water Systems Extend Beyond Minnesota to Multiple States

A cyberattack targeting operational technology systems at over 30 water and wastewater facilities in Minnesota has reportedly extended to at least six other states. The attacks, which occurred on July 26 and 27, have been linked to Iranian hackers known for targeting industrial control systems. While some cities took precautionary measures, such as temporarily shutting down water plants, most reported no operational impact. The U.S. government has not officially blamed Iran, but investigations are ongoing. The attacks have raised concerns about the security of critical infrastructure across the country.

FBI Investigates Cyberattacks on Michigan Water Systems Amid National Threat

FBI Investigates Cyberattacks on Michigan Water Systems Amid National Threat

Nine water systems in Michigan have been targeted in a cyberattack, as confirmed by state officials. This incident is part of a coordinated series of attacks affecting water and wastewater infrastructure across at least seven states. The Michigan Department of Environment, Great Lakes, and Energy (EGLE) reported receiving a federal cyber alert about attempts to tamper with operational technology at water systems. Although no public health concerns have been reported, the attacks have raised alarms about the vulnerability of critical infrastructure. The FBI and other federal agencies are actively investigating, with Iran being considered a primary suspect. The Great Lakes Water Authority has stated that its systems remain unaffected, and Michigan State Police are coordinating with federal partners to secure systems.

European Cybersecurity Report Highlights Decline in Cyber Operations Amid Geopolitical Tensions

European Cybersecurity Report Highlights Decline in Cyber Operations Amid Geopolitical Tensions

The European Repository of Cyber Incidents (EuRepoC) has released its Cyber Conflict Briefing for the second quarter of 2026, highlighting a 14% decline in recorded cyber operations compared to the previous quarter. The report notes that the United States remains the primary target, with 51 incidents, largely due to increased attacks on critical infrastructure linked to the ongoing conflict involving Iran. The briefing also points out a significant decrease in attacks against EU Member States, with Germany, France, and the UK each recording 11 incidents. Data theft continues to be the dominant impact of cyber operations, with ransomware accounting for 26% of all incidents. The report also highlights the increasing use of zero-day vulnerabilities by ransomware groups and the blurring lines between cybercrime and state-sponsored activities.