CISA warns of spike in attacks on water systems as Minnesota incidents probed

Michigan has followed Minnesota's lead in reporting cyberattacks targeting nine of the state's water systems, though officials maintain all systems are currently operating safely. The source of these cyberattacks is under investigation, but they coincide with warnings about Iranian hackers focusing on such systems. Michigan was alerted on Tuesday about attempts to compromise operational technology at water systems.

Subsequently, the state received reports from several communities indicating activity consistent with the federal agencies' descriptions. Dale George, director of communications at Michigan's Department of Environment, Great Lakes, and Energy, stated that the nine impacted systems resumed normal operations after addressing the issues reported by local operators, with no public health concerns identified.

The FBI, alongside the Cybersecurity and Infrastructure Security Agency, is investigating the incident and has not publicly identified the responsible party. The FBI and its interagency partners have been actively engaged in safeguarding critical infrastructure against cyber threats, including those originating from Iranian hackers.

The frequency of such attacks is attributed to the relative ease of infiltrating digital systems and the potential panic caused by any disruptions. Iran has been interested in U.S. water systems for years, with a 2016 Justice Department charge against Iranian hackers for a cyberattack on a dam in New York City. Minnesota's IT Services confirmed that the majority of the attacks involved technology used for remote monitoring and control of water system equipment.

For example, the city of Braham briefly asked residents to reduce water usage while investigating a cyberattack that left the water plant offline, although there were no issues with water quality. Plymouth reported that its water infrastructure communications were restored by Tuesday after a cyberattack. During a Cabinet meeting in Maryland, President Trump falsely claimed responsibility for the cyberattacks on Minnesota, while Governor Tim Walz insisted the president was aware of the responsible party and the broader scope of the attacks.