{
  "id": 3575295,
  "title": "More than 100 water systems were hit in July cyberattacks",
  "url": "https://urgent.news/2026/08/26/more-than-100-water-systems-were-hit-in-july-cyberattacks",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-26T19:04:28.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/cyber-crime/2026/08/26/more-than-100-water-systems-were-hit-in-july-cyberattacks/5292685"
  },
  "original_language": "en",
  "account": "In July 2026, over 100 internet-exposed water systems across at least a dozen US states were targeted by cybercriminals. This marks the first time the US government has disclosed a specific number of such digital intrusions, although they have yet to attribute the campaign to a specific group, widely suspected to be linked to Iran. The Cybersecurity and Infrastructure Security Agency (CISA) revealed that the attacks often involved programmable logic controllers (PLCs) connected directly to a cellular modem, a practice that can create significant security risks. Small, rural utilities in Minnesota, Michigan, Georgia, South Dakota, and New Jersey were hit the hardest. Matt Hartman, former acting head of cyber at CISA, emphasized the seriousness of the situation, stating that the scale of the attack highlights a systemic vulnerability in the water sector. While 100 systems represent only about 0.5 percent of US water utilities, the threat is that these attacks could be a precursor to larger-scale assaults. In response to the incidents, CISA recommended that organizations disconnect PLCs from the internet, use VPN or gateway devices for remote access, enable password protection, and implement multi-factor authentication. The US federal government has not publicly attributed the attacks to any particular entity, acknowledging the difficulty in attribution due to adversaries' tactics.",
  "summary": "'These are test runs for a larger-scale attack'",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 4,
    "also_reported_by": [
      {
        "outlet": "SecurityWeek",
        "title": "CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks",
        "url": "https://urgent.news/2026/08/26/cisa-over-100-internet-exposed-water-systems-targeted-in-july",
        "published": "2026-08-26T11:29:50.000Z"
      },
      {
        "outlet": "TechCrunch",
        "title": "CISA confirms hackers targeted over 100 US water systems during July",
        "url": "https://urgent.news/2026/08/26/cisa-confirms-hackers-targeted-over-100-us-water-systems-during-july",
        "published": "2026-08-26T14:31:05.000Z"
      },
      {
        "outlet": "The Register",
        "title": "More than 100 water systems were hit in July cyberattacks",
        "url": "https://urgent.news/2026/08/26/more-than-100-water-systems-were-hit-in-july-cyberattacks-3579574",
        "published": "2026-08-26T19:04:28.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}