Cyberattack hits US water systems in at least seven states FAST-MOVING
Malicious cyber activity disrupted the operational technology of water and wastewater utilities in at least seven U.S. states. The attacks began with a coordinated breach of more than 30 municipal water systems in Minnesota and later spread to nine systems in Michigan. Operators reported compromised programmable logic controllers, password changes and lockouts that forced many facilities to revert to manual control, but no water‑quality or public‑health impacts were confirmed.
Federal agencies—including the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), the Environmental Protection Agency (EPA) and the Department of Homeland Security—issued a joint advisory and warned utilities to remove internet‑exposed control devices. Investigators are probing a possible link to Iranian‑state‑backed hackers, though formal attribution has not been confirmed. The incident prompted heightened security measures across the water sector nationwide.
Entities: Cybersecurity and Infrastructure Security Agency · Cybersecurity and Infrastructure Security Agency (CISA) · Donald Trump · Environmental Protection Agency · Federal Bureau of Investigation · Federal Bureau of Investigation (FBI) · Iran · Iran-linked hackers · Iranian-linked hackers · Michigan · Minnesota · State of Minnesota
Claims
What the coverage asserts, and how well corroborated each claim is across sources.
- [● 6 SOURCES] Attackers compromised programmable logic controllers (PLCs) used to monitor and control water system equipment. (multiple articles)
- [○ 1 SOURCE] President Donald Trump blamed Minnesota’s governance rather than Iran for the attacks. (c7dac345-ff86-4083-83f4-7fa804ff029d)
- [● 8 SOURCES] More than 30 community water systems in Minnesota were targeted by a coordinated cyberattack. (multiple articles)
- [● 4 SOURCES] The attack affected water and wastewater facilities in at least seven U.S. states. (multiple articles)
- [● 5 SOURCES] U.S. federal agencies, including CISA and the FBI, are investigating possible Iranian-linked hackers as the source. (multiple articles)
- [● 4 SOURCES] No water quality or service interruption was reported despite technical disruptions. (multiple articles)
- [● 5 SOURCES] Some attackers changed passwords and locked operators out of systems, forcing manual operation. (multiple articles)
- [● 3 SOURCES] CISA issued a warning urging water utilities to remove internet exposure from their networks. (multiple articles)
- [● 2 SOURCES] The FBI and EPA issued a joint advisory on the attacks. (multiple articles)