Victims reported to the FBI issues such as flooding and reduced water pressure stemming from the cyberattacks.
The FBI and the Environmental Protection Agency (EPA) have issued a public service announcement warning about cyberattacks targeting essential infrastructure across the United States. Since July 27, 2026, seven water and wastewater utility companies have been compromised, resulting in operational disruptions. The FBI reports that hackers are exploiting Programmable Logic Controllers (PLCs) by remotely accessing devices exposed via the internet. These intruders change IP addresses and passwords, thereby hindering utilities’ ability to monitor and manage their systems effectively.
In response, authorities are recommending that utility companies implement secure gateways and firewalls to shield their systems from direct internet access. They also advise establishing stronger passwords and enforcing access control lists to limit system communication to authorized users only. The FBI has noted incidents of reduced pressure and flooding linked to these attacks, warning that decreased water pressure may allow untreated groundwater to infiltrate pipes, posing a significant risk to operations beyond mere pressure loss.
This alert follows a series of breaches affecting more than 30 municipal water facilities in Minnesota over the past week. Reports suggest these incidents bear the characteristics of Iranian involvement. While law enforcement continues to investigate, it remains unconfirmed whether Iran is directly implicated. However, a memo connected to these attacks has surfaced, indicating a potential link to Iranian hackers.
The memo, shared with members of the Water Information Sharing and Analysis Center (WaterISAC), a consortium for water utility professionals, stated that the Minnesota Fusion Center had issued a warning about “ongoing malicious cyber activity impacting public drinking water systems.” This aligns with a previously reported hacking campaign described by the US Cybersecurity and Infrastructure Security Agency (CISA), which had cautioned about threats from “Iran-affiliated” hackers to water infrastructure and various other sectors.
