Water facilities in 12 US states targeted by cyberattacks, suspected to be Iranian attacks on infrastructure.

A series of cyberattacks targeting water infrastructure such as water treatment plants and sewage treatment facilities have been reported across the United States. Intrusions have been confirmed in at least 12 states, and

https://abcnews.com/US/12-states-face-cyberattacks-water-systems-sources/story?id=135348482

US cyber defense agency warns hackers are increasingly targeting water systems | Reuters
https://www.reuters.com/world/us-cyber-defense-agency-warns-increased-hacker-targeting-water-utilities-2026-07-30/

Multiple sources told ABC News that at least 12 provinces have reported potential cyberattacks targeting water and sewage treatment plants. The sources say Iran is the prime suspect in these attacks, which could potentially disrupt water operations by changing passwords or disabling alarm systems. However, Iran's involvement has not been officially confirmed.

According to sources, as of the time of writing, there have been no widespread disruptions to water supply or sewage treatment.

The FBI is urging water utilities to disconnect their systems from the internet as much as possible, set up emergency-only accounts, and prepare to switch to manual control if automated systems are compromised. In Michigan, one of the affected states, state police said they are monitoring the situation and working with federal partner agencies.

Furthermore, according to a Reuters report, a 'coordinated cyberattack' carried out on July 26 and 27, 2026, targeted more than 30 local water systems in Minnesota. Cynthia Kaiser, a senior FBI cybersecurity officer, told Reuters that 'the Minnesota hacking operation is likely a continuation of past Iran-related targets of programmable logic controllers (PLCs) , industrial control computers, and other critical infrastructure technologies, as pointed out in an April advisory by CISA, the FBI, the NSA, and other federal agencies.'

In addition, while the attack targeting Minnesota was reported to have 'degraded water operations,' state and local authorities have stated that it 'does not threaten water safety.'

U.S. authorities have also suggested that this attack is an extension of a series of cyberattacks on critical infrastructure, separate from the tensions in the Middle East.

US authorities warn Iranian hackers are targeting critical US infrastructure - GIGAZINE