Cyberattacks Target U.S. Water Systems, Raising National Security Concerns
U.S. federal and state agencies are investigating a series of cyberattacks on water and wastewater systems across at least seven states, including Minnesota, where hackers disrupted operations by targeting programmable logic controllers (PLCs). The incidents, which occurred on July 26 and 27, involved attackers remotely accessing internet-facing devices, altering passwords, and locking out operators leading to degraded water services and manual system overrides in some cases.
Minnesota’s chief information security officer, John Israel, confirmed "malicious activity" but noted that not all communities experienced service disruptions. The FBI and EPA issued a joint warning about similar attacks, with preliminary investigations suggesting possible ties to Iran-linked threat actors. The Cybersecurity and Infrastructure Security Agency (CISA) had previously warned about Iranian hackers targeting PLCs, including those manufactured by Rockwell Automation, and later expanded advisories to include other vendors.
Former President Donald Trump publicly dismissed Iran’s involvement, instead blaming Minnesota’s Democratic Governor Tim Walz and the now-defunct Department of Government Efficiency (Doge) for allegedly weakening cybersecurity defenses by cutting CISA funding. Walz countered that the attacks reflect "modern warfare" and accused Trump of deflecting blame, emphasizing that other states were also targeted.
While federal agencies continue assessing the incidents, CISA has highlighted the vulnerability of the 152,000 public drinking water systems and 16,000 wastewater treatment plants in the U.S. No definitive attribution has been confirmed, but the attacks underscore growing risks to critical infrastructure amid regional tensions.
Source: https://www.bbc.com/news/articles/cvgwe2qpgq1o
US Water Services Corporation cybersecurity rating report: https://www.rankiteo.com/company/us-water-services-corporation
"id": "US-1785529472",
"linkid": "us-water-services-corporation",
"type": "Cyber Attack",
"date": "7/2026",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"{'affected_entities': [{'industry': 'Water and wastewater',
'location': ['Minnesota',
'Other U.S. states (at least seven)'],
'name': 'Public water and wastewater systems',
'type': 'Critical infrastructure'}],
'attack_vector': 'Remote access to internet-facing devices',
'date_detected': '2024-07-26',
'description': 'U.S. federal and state agencies are investigating a series of '
'cyberattacks on water and wastewater systems across at least '
'seven states, including Minnesota, where hackers disrupted '
'operations by targeting programmable logic controllers '
'(PLCs). The incidents involved attackers remotely accessing '
'internet-facing devices, altering passwords, and locking out '
'operators, leading to degraded water services and manual '
'system overrides in some cases.',
'impact': {'operational_impact': 'Degraded water services, manual system '
'overrides',
'systems_affected': 'Water and wastewater systems'},
'investigation_status': 'Ongoing',
'references': [{'source': 'FBI, EPA joint warning'},
{'source': 'CISA advisories'}],
'response': {'law_enforcement_notified': 'FBI, EPA'},
'stakeholder_advisories': 'CISA warnings about PLC vulnerabilities',
'threat_actor': ['Iran-linked threat actors'],
'title': 'Cyberattacks Target U.S. Water Systems',
'type': 'Cyberattack',
'vulnerability_exploited': 'Programmable logic controllers (PLCs)'}