The number of states targeted in cyberattacks on water systems has jumped to 12

At least a dozen U.S. states are grappling with cyberattacks on their water systems, marking one of the most extensive coordinated cyber campaigns ever witnessed, according to ABC News. The FBI has confirmed cyberattacks targeting water and wastewater utilities in seven states, with hackers reportedly focusing on pumps, water pressure, and valves in plants.

While President Trump has expressed uncertainty over the involvement of Iran, cybersecurity experts suspect the Middle Eastern nation. No immediate threat to drinking water safety has been reported, although some areas have resorted to manual operations and issued boil-water notices due to pressure losses. Lawmakers and national security officials have long warned about the lack of funding and personnel to secure critical infrastructure, a particular challenge for water utilities, which are typically operated by local governments competing with other priorities.

Many targeted devices were not originally designed for internet connectivity, but were connected, creating vulnerabilities. In Minnesota, over 30 water systems were hit in a coordinated attack. Efforts to bolster security among water utilities are underway, including a volunteer hacker group collaborating with local authorities.