Widespread Cyberattacks Target Water Systems Across Several US States

Water supply systems in Minnesota faced cyberattacks, followed by similar disruptions in Michigan. A spokesperson for Michigan's Department of Environment reported receiving several reports from areas within the state detailing activities consistent with federal descriptions. The spokesperson affirmed all systems remain operational and secure, with local operators having resolved issues, noting no known public health risks. The Federal Bureau of Investigation (FBI) confirmed contact from multiple US states regarding these incidents. The FBI revealed that since July 27, 2026, water and wastewater utility companies in at least seven US states reported cyber incidents, some disrupting facility operations. The FBI explained attackers remotely accessed internet-connected devices, altered IP addresses and passwords, causing loss of monitoring and control functions. The bureau did not specify the responsible entity for these attacks. Concurrently, the US Cybersecurity and Infrastructure Security Agency (CISA) warned of cyberattacks by Iran-linked individuals. These attacks target government services, utilities, water and wastewater systems, and the energy sector. According to media reports, Minnesota also saw attacks this week on dozens of water supply systems, leading to at least one system being temporarily shut down. Experts suspect Iranian hackers are involved.