Iran suspected of conducting cyberattacks on US water suppliers in 45 municipalities — small towns mostly targeted, with utilities switching to manual control
Several US towns said that their water utilities have suffered from cyberattacks, which are suspected to have originated from Iran. While systems remain running, several have resorted to manual control to protect the water supply.
Iran is under suspicion for conducting cyberattacks on water supply control systems in 45 municipalities across seven states, with smaller towns predominantly targeted. While there is no concrete proof that Iran orchestrated these attacks, it is noted that such actions have been increasing since the U.S. initiated its bombing campaign against the nation.
Minnesota was the first state to report the cyberattacks, followed by Michigan. Although no major disruptions have occurred, rendering tap water unsafe for consumption, authorities are closely monitoring the situation, particularly concerning older computer systems that regulate water quality, chemical treatments, and pressure, especially those connected to the internet.
Braham, a small city in Minnesota with a population of less than 2,000 people, is one of the affected areas. The mayor, Nate George, revealed that they have received guidance on resolving the issue and enhancing their defenses against future attacks. However, he expressed concern over the high costs associated with upgrading their IT infrastructure as a small municipality.
Federal officials suspect that the attacks are state-sponsored but have not confirmed the involvement of Iranian actors. The White House has downplayed the suspected state-sponsored cyberattacks. This marks the first time that essential services and infrastructure within the mainland U.S. have been affected by suspected Iranian hackers during the ongoing 2026 war.
Iran has previously been targeted by cyberattacks, but this is the first instance where critical services within the mainland have been impacted. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has previously cautioned about potential Iranian cyberattacks, but smaller municipalities remain vulnerable. Iran was also targeted by a cyberattack in the past, allegedly linked to the U.S., though no one has claimed responsibility for the CanisterWorm malware attack that wiped out Iranian machines without any apparent reason.
As warfare has evolved to encompass cyberspace, states must prioritize protecting and dominating this fifth domain.
Written by urgent.news from Tom's Hardware's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
