Multi-State Cyberattacks On Water Utilities Expose U.S. Infrastructure Gaps
Hackers breached operating technology at dozens of U.S. water utilities from Georgia to South Dakota over two days in late July 2026, exposing them to loss of pressure and flooding, officials said.[1]
The FBI confirmed on July 30, 2026, that water and wastewater utilities in seven states were attacked.[1] More than 30 Minnesota water systems, including Plymouth, were compromised and some operators switched to manual control when screens and automated systems failed.[1]
A joint advisory issued by seven federal agencies warned about four days before the attacks that Iranian-affiliated actors were targeting U.S. critical infrastructure through internet-connected devices.[1] Federal investigators say attackers remotely accessed devices, changed IP addresses and passwords, and temporarily locked utilities out of their own systems.[1]
Officials and operators say the incidents revealed gaps in monitoring and response at small utilities and underscore the challenge of protecting dispersed infrastructure from Iranian-affiliated cyber campaigns.[1]
Show source details & analysis (1 source)
📌 Key Facts
- Over two days in late July 2026, hackers accessed operating technology at dozens of U.S. water utilities from Georgia to South Dakota.
- The FBI confirmed on July 30, 2026, that water and wastewater utilities in seven states were attacked and later warned of impacts including loss of pressure and flooding.
- More than 30 Minnesota water systems, including Plymouth, were compromised, forcing some operators to switch to manual control when screens and automated systems failed.
- A joint advisory from seven federal agencies issued about four days before the attacks warned of Iranian‑affiliated cyber targeting of U.S. critical infrastructure via internet‑connected devices.
- Attackers remotely accessed those devices, changed IP addresses and passwords, and temporarily locked utilities out of their own systems, according to an FBI advisory.
📰 Source Timeline (1)
Follow how coverage of this story developed over time