Cyberattack Targets Two New Jersey Water Systems, Linked to Iran
Two water systems in Cape May County, New Jersey operated by the City of Cape May Water and Sewer Department and the Borough of Woodbine Water Department were recently hit by a cyberattack, marking the latest in a series of incidents affecting municipal water infrastructure across seven states. Officials confirmed the breach but assured the public that drinking water safety and quality remained unaffected, as treatment and monitoring systems continued to function normally.
The attack, believed to be linked to Iran, involved hackers infiltrating network systems, changing passwords, and locking out operators. While the intrusion was primarily internet-based, it did not disrupt water supply operations. In other states, similar cyberattacks have led to low water pressure and boil-water advisories, though no contamination has been reported.
Cape May Mayor Zachary Mullock stated that the city is working with state and federal agencies to secure its desalination plant, which serves Cape May, West Cape May, Lower Township, Cape May Point, and the U.S. Coast Guard Training Center. Meanwhile, Woodbine Mayor William Pikolycky noted that the borough’s system detected and neutralized the breach quickly, with only phone communications briefly interrupted.
The incident underscores the growing threat to critical infrastructure, as water systems become increasingly targeted by foreign adversaries seeking to exploit vulnerabilities for disruption. While local officials maintain that no immediate action is required from residents, the attacks highlight the need for heightened cybersecurity measures in essential services.
Source: https://nj1015.com/ixp/397/p/cape-may-water-cyberattack/
Borough of Woodbine Water Department TPRM report: https://www.rankiteo.com/company/borough-of-wood-ridge
"id": "bor1786084117",
"linkid": "borough-of-wood-ridge",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"{'affected_entities': [{'customers_affected': 'Cape May, West Cape May, Lower '
'Township, Cape May Point, U.S. '
'Coast Guard Training Center',
'industry': 'Water utilities',
'location': 'Cape May, New Jersey, USA',
'name': 'City of Cape May Water and Sewer Department',
'type': 'Municipal water system'},
{'industry': 'Water utilities',
'location': 'Woodbine, New Jersey, USA',
'name': 'Borough of Woodbine Water Department',
'type': 'Municipal water system'}],
'attack_vector': 'Internet-based intrusion',
'customer_advisories': 'No immediate action required from residents',
'description': 'Two water systems in Cape May County, New Jersey operated by '
'the City of Cape May Water and Sewer Department and the '
'Borough of Woodbine Water Department were hit by a '
'cyberattack. The attack, believed to be linked to Iran, '
'involved hackers infiltrating network systems, changing '
'passwords, and locking out operators. Drinking water safety '
'and quality remained unaffected as treatment and monitoring '
'systems continued to function normally.',
'impact': {'operational_impact': 'Password changes, operator lockout; no '
'disruption to water supply operations',
'systems_affected': 'Network systems, password management'},
'lessons_learned': 'Growing threat to critical infrastructure; need for '
'heightened cybersecurity measures in essential services',
'motivation': 'Disruption of critical infrastructure',
'references': [{'source': 'Incident report'}],
'response': {'containment_measures': 'Breach detection and neutralization',
'third_party_assistance': 'State and federal agencies'},
'threat_actor': 'Iran-linked hackers',
'title': 'Cyberattack Targets Two New Jersey Water Systems, Linked to Iran',
'type': 'Cyberattack'}