Cyberattacks Target U.S. Water Systems Across Multiple States
This week, cyberattacks on municipal water systems were reported in at least seven states, prompting the FBI and Environmental Protection Agency (EPA) to issue a nationwide warning to utilities. The agencies confirmed that hackers have disrupted water and wastewater operations, though the affected states remain unnamed.
In Minnesota, over 30 water facilities were targeted in an attack with suspected Iranian involvement, though officials have not publicly attributed the breach to a specific actor. While no contamination of water supplies was detected, the Cybersecurity and Infrastructure Security Agency (CISA) noted that similar attacks elsewhere have led to boil-water advisories and forced manual operations.
The FBI and EPA advisory highlighted that hackers exploited internet-facing control systems, altering IP addresses, passwords, and disabling monitoring capabilities. Wisconsin’s Department of Natural Resources warned that its systems may also be vulnerable, citing intelligence suggesting ongoing threats. In Minnesota, hackers manipulated system pressures, triggering alarms and risking potential shutdowns or contamination.
The attacks follow a July 22 federal advisory warning of Iran-backed hackers targeting critical infrastructure amid rising U.S.-Iran tensions. U.S. intelligence agencies have previously noted Iran’s growing cyber capabilities, including past attempts to breach water systems in 2023.
Federal agencies urged water utilities to secure programmable logic controllers (PLCs) behind firewalls, enforce strong passwords, and restrict device communications. Minnesota officials emphasized that attribution requires thorough analysis, deferring to federal partners for further investigation.
Minnesota Water cybersecurity rating report: https://www.rankiteo.com/company/minnesota-water
Wisconsin Department of Natural Resources (DNR) cybersecurity rating report: https://www.rankiteo.com/company/wisconsin-department-of-natural-resources
"id": "MINWIS1785529555",
"linkid": "minnesota-water, wisconsin-department-of-natural-resources",
"type": "Cyber Attack",
"date": "7/2026",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"{'affected_entities': [{'industry': 'critical infrastructure',
'location': 'United States (at least seven states, '
'including Minnesota and Wisconsin)',
'name': 'Municipal water systems in multiple states',
'type': 'water utility'},
{'industry': 'critical infrastructure',
'location': 'Minnesota, USA',
'name': 'Over 30 water facilities in Minnesota',
'type': 'water utility'}],
'attack_vector': 'exploitation of internet-facing control systems',
'description': 'Cyberattacks on municipal water systems were reported in at '
'least seven states, disrupting water and wastewater '
'operations. Hackers exploited internet-facing control '
'systems, altered IP addresses, passwords, and disabled '
'monitoring capabilities. In Minnesota, over 30 water '
'facilities were targeted with suspected Iranian involvement. '
'Similar attacks led to boil-water advisories and forced '
'manual operations in other states.',
'impact': {'operational_impact': ['forced manual operations',
'boil-water advisories',
'risk of shutdowns or contamination'],
'systems_affected': ['water and wastewater control systems',
'monitoring capabilities']},
'investigation_status': 'ongoing',
'motivation': 'disruption of critical infrastructure amid U.S.-Iran tensions',
'post_incident_analysis': {'root_causes': ['unsecured internet-facing control '
'systems',
'weak passwords',
'lack of firewalls']},
'recommendations': ['secure programmable logic controllers (PLCs) behind '
'firewalls',
'enforce strong passwords',
'restrict device communications'],
'references': [{'source': 'FBI and EPA advisory'},
{'source': 'CISA'},
{'source': 'Wisconsin Department of Natural Resources'}],
'regulatory_compliance': {'regulatory_notifications': 'EPA and FBI advisory'},
'response': {'communication_strategy': 'federal advisory issued to utilities',
'law_enforcement_notified': 'FBI and EPA',
'remediation_measures': ['securing PLCs behind firewalls',
'enforcing strong passwords',
'restricting device communications']},
'stakeholder_advisories': 'federal agencies issued nationwide warnings to '
'utilities',
'threat_actor': 'suspected Iranian-backed hackers',
'title': 'Cyberattacks Target U.S. Water Systems Across Multiple States',
'type': ['cyberattack', 'disruption of operations'],
'vulnerability_exploited': 'unsecured programmable logic controllers (PLCs), '
'weak passwords, lack of firewalls'}