Cyberattacks on water systems expand to 12 states as South Dakota, Georgia announce incidents

Cyberattacks targeting water systems in multiple U.S. states have raised concerns about the safety of drinking water. Since late July, water facilities in at least seven states have been affected. The attacks, confirmed by the FBI on July 30, were carried out remotely by accessing internet-connected devices at the water systems.

The attackers changed IP addresses and passwords, leading to a loss of monitoring and control functionality. This could potentially allow untreated groundwater to seep into pipes, causing pressure loss and flooding. The states affected include Minnesota, Michigan, Georgia, and others. While the FBI and Cybersecurity and Infrastructure Security Agency (CISA) have not publicly identified the perpetrators, some reports suggest it may be Iran or Iranian-linked groups.

President Trump suggested the attacks were due to "gross incompetence" in Minnesota, while Governor Tim Walz accused the U.S. of being more exposed to cyberattacks after cuts to the CISA caused by Elon Musk's DOGE. As of now, no government agency has warned that water quality or safety has been compromised in the affected states.