U.S. water and wastewater utilities and Michigan State Police: At least 12 states face cyberattacks on their water systems, sources say

Cyberattacks Target U.S. Water Systems Across 12 States, Iran Suspected

Multiple U.S. water and wastewater utilities across at least 12 states have reported cyber intrusions, with Iran identified as the prime suspect, though its involvement remains unconfirmed. The attacks, which have not caused widespread disruptions to water supplies or treatment, involve tactics such as password changes and alarm disabling to impair utility operations.

The FBI has advised affected facilities to disconnect systems from the internet where possible, implement breaker systems, and prepare manual controls as a fallback. In Michigan one of the impacted states authorities confirmed ongoing monitoring and coordination with federal agencies, emphasizing that no public health risks have emerged. Local operators have addressed issues, and systems remain operational.

The Michigan State Police, working with the Department of Environment, Great Lakes, and Energy, urged facilities using vulnerable software to strengthen security measures. The FBI is leading the investigation, with no further details disclosed at this time.

Source: https://abcnews.com/US/12-states-face-cyberattacks-water-systems-sources/story?id=135348482

U.S. water and wastewater utilities TPRM report: https://www.rankiteo.com/company/american-water-works-association

Michigan State Police TPRM report: https://www.rankiteo.com/company/csawestmichigan

"id": "amecsa1785889528",
"linkid": "american-water-works-association, csawestmichigan",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"

{'affected_entities': [{'industry': 'Utilities',
                        'location': 'United States (12 states, including '
                                    'Michigan)',
                        'type': 'Water and wastewater utilities'}],
 'description': 'Multiple U.S. water and wastewater utilities across at least '
                '12 states have reported cyber intrusions, with Iran '
                'identified as the prime suspect. The attacks involve tactics '
                'such as password changes and alarm disabling to impair '
                'utility operations, though no widespread disruptions to water '
                'supplies or treatment have occurred.',
 'impact': {'operational_impact': 'Password changes and alarm disabling to '
                                  'impair operations',
            'systems_affected': 'Water and wastewater utility systems'},
 'investigation_status': 'Ongoing',
 'recommendations': 'Strengthen security measures for facilities using '
                    'vulnerable software',
 'references': [{'source': 'FBI advisory'},
                {'source': 'Michigan State Police and Department of '
                           'Environment, Great Lakes, and Energy'}],
 'response': {'containment_measures': 'Disconnect systems from the internet '
                                      'where possible, implement breaker '
                                      'systems, prepare manual controls as '
                                      'fallback',
              'enhanced_monitoring': 'Ongoing monitoring and coordination with '
                                     'federal agencies',
              'law_enforcement_notified': 'FBI'},
 'stakeholder_advisories': 'Facilities urged to strengthen security measures',
 'threat_actor': 'Iran (suspected, unconfirmed)',
 'title': 'Cyberattacks Target U.S. Water Systems Across 12 States, Iran '
          'Suspected',
 'type': 'Cyber Intrusion',
 'vulnerability_exploited': 'Vulnerable software'}