Iranian-Backed Hackers Target Michigan Water Systems in Coordinated Cyberattack
Federal investigators are tracking Iranian-backed hackers suspected of launching a coordinated cyberattack on nine municipal water systems across Michigan. While the Lansing Board of Water and Light (BWL) was not among the targeted systems, it reported an increase in attempted intrusions all of which were blocked by firewalls.
The Michigan Department of Environment, Great Lakes, and Energy confirmed that none of the targeted systems were compromised, and no public health risks resulted from the attacks. BWL Public Information Officer Vernon Myers stated that the utility detected the activity through monitoring and was prepared to respond, noting a rise in scans of their firewalls and exploited ports.
Cybersecurity experts, including Michigan State University’s Tom Holt, highlighted funding gaps as a key vulnerability, particularly in rural or under-resourced areas. Holt emphasized that defending critical infrastructure requires sustained investment, as modernizing systems is essential to countering evolving threats.
Michigan is the seventh U.S. state to face such attacks, following Minnesota, which reported over 30 similar incidents linked to the same campaign. The incidents underscore the need for infrastructure upgrades and preparedness, though officials stress that no successful breaches occurred in this case.
Lansing Board of Water and Light TPRM report: https://www.rankiteo.com/company/lansingbwl
Michigan Department of Environment, Great Lakes, and Energy TPRM report: https://www.rankiteo.com/company/michigan-state-university
"id": "lanmic1785875969",
"linkid": "lansingbwl, michigan-state-university",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"{'affected_entities': [{'industry': 'Critical Infrastructure',
'location': 'Michigan, USA',
'name': 'Nine municipal water systems (unspecified)',
'type': 'Water utility'},
{'industry': 'Critical Infrastructure',
'location': 'Lansing, Michigan, USA',
'name': 'Lansing Board of Water and Light (BWL)',
'type': 'Water utility'}],
'attack_vector': 'Exploited ports, firewall scans',
'description': 'Federal investigators are tracking Iranian-backed hackers '
'suspected of launching a coordinated cyberattack on nine '
'municipal water systems across Michigan. The Lansing Board of '
'Water and Light (BWL) reported an increase in attempted '
'intrusions, all of which were blocked by firewalls. No '
'systems were compromised, and no public health risks resulted '
'from the attacks.',
'investigation_status': 'Ongoing',
'lessons_learned': 'Funding gaps and lack of modernization in rural or '
'under-resourced areas increase vulnerability. Sustained '
'investment is critical for defending critical '
'infrastructure.',
'post_incident_analysis': {'corrective_actions': 'Modernize systems, enhance '
'monitoring, and allocate '
'sustained funding for '
'cybersecurity.',
'root_causes': 'Funding gaps, outdated '
'infrastructure, and lack of '
'cybersecurity investment in '
'critical infrastructure.'},
'recommendations': 'Upgrade infrastructure, enhance monitoring, and invest in '
'cybersecurity preparedness.',
'references': [{'source': 'Michigan Department of Environment, Great Lakes, '
'and Energy'},
{'source': 'Lansing Board of Water and Light (BWL) Public '
'Information Officer Vernon Myers'},
{'source': 'Michigan State University’s Tom Holt'}],
'response': {'containment_measures': 'Firewalls blocked intrusions',
'enhanced_monitoring': 'Yes',
'incident_response_plan_activated': 'Yes (monitoring and '
'blocking)',
'law_enforcement_notified': 'Federal investigators involved'},
'threat_actor': 'Iranian-backed hackers',
'title': 'Iranian-Backed Hackers Target Michigan Water Systems in Coordinated '
'Cyberattack',
'type': 'Cyberattack'}