How U.S. officials could confirm if Iran was behind the water systems cyberattack
Lauryn Williams, the deputy director and senior fellow of the Strategic Technologies Program at the Center for Strategic and International Studies, joins to discuss the U.S. probe into Iran possibly targeting water systems in Michigan and Minnesota.
Iran is under suspicion for conducting cyberattacks on water supply control systems in 45 municipalities across seven states, with smaller towns predominantly targeted. While there is no concrete proof that Iran orchestrated these attacks, it is noted that such actions have been increasing since the U.S. initiated its bombing campaign against the nation.
Minnesota was the first state to report the cyberattacks, followed by Michigan. Although no major disruptions have occurred, rendering tap water unsafe for consumption, authorities are closely monitoring the situation, particularly concerning older computer systems that regulate water quality, chemical treatments, and pressure, especially those connected to the internet.
Braham, a small city in Minnesota with a population of less than 2,000 people, is one of the affected areas. The mayor, Nate George, revealed that they have received guidance on resolving the issue and enhancing their defenses against future attacks. However, he expressed concern over the high costs associated with upgrading their IT infrastructure as a small municipality.
Federal officials suspect that the attacks are state-sponsored but have not confirmed the involvement of Iranian actors. The White House has downplayed the suspected state-sponsored cyberattacks. This marks the first time that essential services and infrastructure within the mainland U.S. have been affected by suspected Iranian hackers during the ongoing 2026 war.
Iran has previously been targeted by cyberattacks, but this is the first instance where critical services within the mainland have been impacted. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has previously cautioned about potential Iranian cyberattacks, but smaller municipalities remain vulnerable. Iran was also targeted by a cyberattack in the past, allegedly linked to the U.S., though no one has claimed responsibility for the CanisterWorm malware attack that wiped out Iranian machines without any apparent reason.
As warfare has evolved to encompass cyberspace, states must prioritize protecting and dominating this fifth domain.
Written by urgent.news from Tom's Hardware's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
