Cyberattack Targets Nine Michigan Water Systems in Coordinated Campaign
Michigan officials confirmed that nine water systems in the state were targeted in a recent cyberattack, part of a broader campaign affecting at least seven states. The Michigan Department of Environment, Great Lakes, and Energy (EGLE) first detected the threat after receiving a federal alert warning of attempts to tamper with operational technology in water and wastewater infrastructure.
While all affected systems continued to operate safely, local operators addressed the incidents, and no public health risks were reported. In at least one case outside Michigan, attackers changed passwords and network settings, locking operators out and disrupting water flow control.
U.S. intelligence and investigative agencies suspect Iran’s involvement, though no official attribution has been made. The FBI acknowledged the attacks, stating it is working with interagency partners to protect critical infrastructure.
The Great Lakes Water Authority (GLWA) reported no impact on its systems, while the Michigan State Police (MSP) are coordinating with federal agencies to assist municipal water providers. Authorities have not disclosed which Michigan communities were targeted, though Oakland County confirmed it was unaffected.
Cybersecurity experts note the attacks reflect a growing trend of threats against critical infrastructure, including water, energy, and healthcare systems. Many organizations continue to modernize outdated technology while defending against increasingly sophisticated cyber threats.
Michigan Department of Environment, Great Lakes, and Energy TPRM report: https://www.rankiteo.com/company/michigan-department-of-environment-great-lakes-and-energy
"id": "mic1785796092",
"linkid": "michigan-department-of-environment-great-lakes-and-energy",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"{'affected_entities': [{'industry': 'Utilities',
'location': 'Michigan, USA',
'name': 'Nine unidentified Michigan water systems',
'type': 'Water and wastewater infrastructure'}],
'attack_vector': 'Tampering with operational technology',
'description': 'Michigan officials confirmed that nine water systems in the '
'state were targeted in a recent cyberattack, part of a '
'broader campaign affecting at least seven states. The attack '
'involved attempts to tamper with operational technology in '
'water and wastewater infrastructure. While all affected '
'systems continued to operate safely, local operators '
'addressed the incidents, and no public health risks were '
'reported. In at least one case outside Michigan, attackers '
'changed passwords and network settings, locking operators out '
'and disrupting water flow control.',
'impact': {'operational_impact': 'Disruption of water flow control in at '
'least one case outside Michigan',
'systems_affected': 'Operational technology in water and '
'wastewater infrastructure'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Growing trend of threats against critical infrastructure, '
'highlighting the need for modernization and defense '
'against sophisticated cyber threats.',
'motivation': 'Disruption of critical infrastructure',
'references': [{'source': 'Michigan Department of Environment, Great Lakes, '
'and Energy (EGLE)'},
{'source': 'FBI'},
{'source': 'Great Lakes Water Authority (GLWA)'},
{'source': 'Michigan State Police (MSP)'}],
'response': {'law_enforcement_notified': 'Yes (FBI and interagency partners)',
'remediation_measures': 'Local operators addressed the '
'incidents'},
'threat_actor': 'Suspected Iranian state-sponsored actors',
'title': 'Coordinated Cyberattack on Nine Michigan Water Systems',
'type': 'Cyberattack'}