What we know about the cyberattacks on water systems in 7 states

At least seven states have been targeted in a growing wave of cyberattacks on critical water infrastructure across the country. According to the FBI, malicious cyber actors have targeted water and wastewater systems since July 27, 2026, causing operational disruptions and, in some cases, degrading water operations.

The attacks have involved targeting internet-facing Programmable Logic Controllers (PLCs), which are devices used to monitor and control industrial equipment at water and wastewater facilities. Hackers have altered IP addresses and passwords, causing utilities to lose monitoring and control capabilities. Reported consequences have included flooding and pressure loss in affected systems.

Federal officials, including the FBI and Environmental Protection Agency (EPA), have warned water utilities to remove exposed control systems from the public internet and strengthen cybersecurity protections. The FBI has reportedly attributed the attacks to Iran, although the affected states have not been publicly identified.

Brief written by urgent.news from PBS NewsHour Health, Newsweek — 2 reports on this story. Machine-written — may contain errors; check the original before relying on it.