A summary of mainstream reporting, plus the facts and perspectives it leaves out. A more honest account of each story.
Back to all stories
Pajaro Valley Water Management Agency (PVWMA) sanitized wastewater is identified by purple pipes used deliver water to growers who use it as is or in blends with salty ground (well) water to reduce the salt content for agriculture use, in Watsonville, CA, on Thursday, August 27, 2015. 
The Pajaro Va
Photo: USDAgov | Public domain | Wikimedia Commons

Multi-State Cyberattacks On Water Utilities Expose U.S. Infrastructure Gaps

Hackers breached operating technology at dozens of U.S. water utilities from Georgia to South Dakota over two days in late July 2026, exposing them to loss of pressure and flooding, officials said.[1]

The FBI confirmed on July 30, 2026, that water and wastewater utilities in seven states were attacked.[1] More than 30 Minnesota water systems, including Plymouth, were compromised and some operators switched to manual control when screens and automated systems failed.[1]

A joint advisory issued by seven federal agencies warned about four days before the attacks that Iranian-affiliated actors were targeting U.S. critical infrastructure through internet-connected devices.[1] Federal investigators say attackers remotely accessed devices, changed IP addresses and passwords, and temporarily locked utilities out of their own systems.[1]

Officials and operators say the incidents revealed gaps in monitoring and response at small utilities and underscore the challenge of protecting dispersed infrastructure from Iranian-affiliated cyber campaigns.[1]

  1. Christian Science Monitor
Cybersecurity and Critical Infrastructure Water Utilities and Public Safety U.S. National Security
Show source details & analysis (1 source)

📌 Key Facts

  • Over two days in late July 2026, hackers accessed operating technology at dozens of U.S. water utilities from Georgia to South Dakota.
  • The FBI confirmed on July 30, 2026, that water and wastewater utilities in seven states were attacked and later warned of impacts including loss of pressure and flooding.
  • More than 30 Minnesota water systems, including Plymouth, were compromised, forcing some operators to switch to manual control when screens and automated systems failed.
  • A joint advisory from seven federal agencies issued about four days before the attacks warned of Iranian‑affiliated cyber targeting of U.S. critical infrastructure via internet‑connected devices.
  • Attackers remotely accessed those devices, changed IP addresses and passwords, and temporarily locked utilities out of their own systems, according to an FBI advisory.

📰 Source Timeline (1)

Follow how coverage of this story developed over time

August 18, 2026
8:16 PM
Cyberattacks on water facilities test US defenses, reveal gaps
The Christian Science Monitor by Henry Gass