Officials say attacks on July 26-27 hit water utilities in at least seven states, with Minnesota reporting more than 30 systems targeted.
Why it matters: The incidents highlight the vulnerability of small utilities with limited cybersecurity resources. Water systems are part of local infrastructure communities rely on every day.
- Minnesota IT Services said attackers targeted operational technology at more than 30 community water systems on July 26-27 and disclosed the incident on July 28.
- On July 30, the EPA and FBI said water and wastewater utilities in at least seven states had been hit, and some operations were disrupted.
- Braham, Minnesota said its water plant was briefly taken offline after the cyber incident, while Plymouth said communications at its water facilities were restored after an attack earlier that week.
- Federal agencies had already warned on April 7 that Iranian-affiliated actors were targeting water-sector operational technology.
Officials are investigating a wave of cyberattacks against U.S. water utilities that appears to span multiple states. Minnesota IT Services said a coordinated attack targeted operational technology - the computer systems that control physical equipment - at more than 30 community water systems on July 26-27, and the agency disclosed the incident on July 28. Minnesota IT Services said it activated a statewide cybersecurity response.
Federal agencies later said the pattern extended beyond Minnesota. In a July 30 notice, the EPA and FBI said cyberattacks had struck water and wastewater utilities in at least seven states, with some operations disrupted. The same day, CISA said Iranian-affiliated actors were targeting water-sector organizations and internet-connected programmable logic controllers, which are devices that automate industrial equipment.
Local disclosures suggest the attacks affected utilities in different ways. Braham, Minnesota said its water plant was briefly taken offline after the cyber incident, while Plymouth said communications at its water facilities were restored after an attack earlier that week. Braham and Plymouth each tied their updates to water-system incidents.
By the numbers
- More than 30 - Minnesota community water systems targeted, according to Minnesota IT Services.
- At least 7 - states where the EPA and FBI said water and wastewater utilities were hit.
- July 26-27 - when Minnesota said the attacks occurred.
Yes, but: The public disclosures rely heavily on government advisories and local statements, so the full scope of the incidents remains unclear.
What's next: Officials have not announced a broader attribution or full damage assessment.