Iran-linked hackers target US municipal water systems
In late July 2026, hackers attempted to breach at least 30 municipal water systems in Minnesota, using programmable logic controllers that manage pumps, valves and water‑quality sensors. Similar cyberattacks were reported in Michigan and five other states, and by early August officials said a total of at least twelve states had notified the FBI of possible incidents. The attacks are suspected to be carried out by groups aligned with Iran, though U.S. authorities have not publicly attributed them.
Utility operators responded by shutting down the compromised control computers and switching to manual field operation, keeping water safe to drink. The incidents follow years of warnings about the vulnerability of water‑system cyber‑infrastructure. In 2023 the Environmental Protection Agency proposed stronger cybersecurity standards for water utilities, but the rule was rescinded after lawsuits from Republican‑led states and industry groups. Federal and state officials are now racing to bolster defenses and address the ongoing assault on the nation’s water supply.
Entities: Guatemala · Iran · Iranian hackers · Moldova · Municipal water utilities · Programmable logic controllers · Spain · U.S. Environmental Protection Agency · U.S. Federal Bureau of Investigation · United States
Claims
What the coverage asserts, and how well corroborated each claim is across sources.
- [● 3 SOURCES] The attacks are suspected to be carried out by hackers aligned with Iran. (9bf8e636-bce5-47f4-b5d5-6464e51eaac4, 5ef061eb-fff6-4631-a11f-c3afa6d0f08a, 9160953a-f66d-4de7-b42b-dc322018ab45)
- [● 2 SOURCES] Similar cyberattacks have been reported in Michigan and five other states. (9bf8e636-bce5-47f4-b5d5-6464e51eaac4, 9160953a-f66d-4de7-b42b-dc322018ab45)
- [○ 1 SOURCE] The EPA proposed stronger cybersecurity guidelines for water utilities in 2023, which were rescinded after lawsuits. (5ef061eb-fff6-4631-a11f-c3afa6d0f08a)
- [● 2 SOURCES] At least a dozen U.S. states have reported possible water‑system attacks to the FBI. (5ef061eb-fff6-4631-a11f-c3afa6d0f08a, 9160953a-f66d-4de7-b42b-dc322018ab45)
- [○ 1 SOURCE] Federal and state officials are racing to address the assault on the nation’s water supply. (5ef061eb-fff6-4631-a11f-c3afa6d0f08a)
- [○ 1 SOURCE] Utilities responded by shutting down control computers and operating equipment manually, keeping water safe to drink. (9bf8e636-bce5-47f4-b5d5-6464e51eaac4)
- [○ 1 SOURCE] Programmable logic controllers were the target of the cyberattacks. (9bf8e636-bce5-47f4-b5d5-6464e51eaac4)
- [● 2 SOURCES] Hackers attempted to break into at least 30 municipal water systems in Minnesota on July 26‑27, 2026. (9bf8e636-bce5-47f4-b5d5-6464e51eaac4, 9160953a-f66d-4de7-b42b-dc322018ab45)