FBI Investigates Surge in Cyberattacks Targeting U.S. Water Utilities
The FBI is tracking a sharp increase in malicious cyberattacks on water utilities across seven states over the past two weeks, with some incidents causing operational disruptions, including loss of water pressure and localized flooding. While no widespread supply outages have been reported, Minnesota and Michigan have been confirmed among the affected states.
On Thursday, the FBI issued a Public Service Announcement urging municipal water operators to bolster cybersecurity measures, disconnect operational technology from the internet, and prepare manual controls in case automated systems are compromised. The agency warned that critical infrastructure sectors such as water, energy, and transportation are prime targets for adversaries due to their essential role in public safety.
Cybersecurity expert Matt Hartman, Chief Strategy Officer for the Merlin Group, emphasized the growing threat during the Black Hat Cybersecurity Conference in Las Vegas. He noted that nation-state actors, including those from countries in conflict with the U.S., may be targeting local utilities, which often lack the resources to defend against sophisticated attacks.
Hartman stressed the need for federal intervention to strengthen baseline protections, arguing that individual municipalities cannot realistically defend against advanced threats like those posed by China, Iran, or Russia. The Southern Nevada Water Authority declined to comment on its cybersecurity efforts but confirmed ongoing monitoring and adaptive defenses against evolving threats.
Southern Water Service cybersecurity rating report: https://www.rankiteo.com/company/southern-water-service
"id": "SOU1785954272",
"linkid": "southern-water-service",
"type": "Cyber Attack",
"date": "7/2026",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"{'affected_entities': [{'industry': 'Water and wastewater systems',
'location': ['Minnesota',
'Michigan',
'Five other unnamed states'],
'type': 'Water utilities'},
{'industry': 'Water and wastewater systems',
'location': 'Nevada',
'name': 'Southern Nevada Water Authority',
'type': 'Water utility'}],
'description': 'The FBI is tracking a sharp increase in malicious '
'cyberattacks on water utilities across seven states over the '
'past two weeks, with some incidents causing operational '
'disruptions, including loss of water pressure and localized '
'flooding. While no widespread supply outages have been '
'reported, Minnesota and Michigan have been confirmed among '
'the affected states.',
'impact': {'operational_impact': ['Loss of water pressure',
'Localized flooding'],
'systems_affected': 'Operational technology'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Individual municipalities lack resources to defend '
'against sophisticated attacks; federal intervention is '
'needed to strengthen baseline protections.',
'motivation': 'Targeting critical infrastructure due to essential role in '
'public safety',
'recommendations': ['Bolster cybersecurity measures',
'Disconnect operational technology from the internet',
'Prepare manual controls'],
'references': [{'source': 'FBI Public Service Announcement'},
{'source': 'Black Hat Cybersecurity Conference'}],
'response': {'communication_strategy': 'Public Service Announcement',
'containment_measures': ['Disconnect operational technology from '
'the internet',
'Prepare manual controls'],
'enhanced_monitoring': 'Ongoing monitoring and adaptive defenses',
'law_enforcement_notified': 'FBI'},
'stakeholder_advisories': 'FBI urges municipal water operators to bolster '
'cybersecurity measures.',
'threat_actor': ['Nation-state actors', 'China', 'Iran', 'Russia'],
'title': 'FBI Investigates Surge in Cyberattacks Targeting U.S. Water '
'Utilities',
'type': 'Cyberattack'}