Map Shows States Hit By Cyberattacks on Water Systems

Recent cyberattacks on water and wastewater systems across multiple US states have raised concerns over the security of critical public services. The FBI and EPA warned on July 30 that malicious actors had targeted at least seven states since July 27, causing operational disruptions and potentially compromising water quality.

The attacks, which targeted internet-facing Programmable Logic Controllers (PLCs) used to monitor and control industrial equipment, led to flooding and pressure loss in some affected systems. State officials in Minnesota reported incidents affecting over 30 water systems, drawing national attention. President Trump criticized Minnesota officials for what he deemed "grossly incompetent" handling of the situation.

Michigan also experienced a cyber incident, where hackers altered settings on equipment connected to a wastewater facility. The situation was contained, with no threat to drinking water. In Rapid City, South Dakota, one of its wastewater lift stations was targeted, though the attack did not compromise drinking water quality or public safety.

California experienced a recent incident after a hacking group claimed to have breached its systems, accessing one customer's online account. However, investigators found no evidence of penetration into the utility's internal networks or operational technology systems.

Federal officials are investigating whether these attacks could be linked to Iranian hackers, though no formal attribution has been made. Similar attacks against American water infrastructure have previously been attributed to Iranian hackers, prompting concerns about the security of industrial control systems. The FBI and EPA are urging water utilities to remove exposed control systems from the public internet and strengthen cybersecurity protections. The investigation into the extent and origin of these attacks continues.