[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

10 clusters · 224 sources · 38 days · First seen · Last updated

US and UK infrastructure targeted in suspected Iran-linked's

Overview

Since the late‑July 2026 intrusion that knocked a Minnesota water plant offline, coordinated attacks on internet‑exposed Rockwell Automation/Allen‑Bradley PLCs have been reported in at least twelve U.S. states, including Michigan, Georgia, New Jersey, and South Dakota. Utilities have lost monitoring and control, experienced pressure drops, localized flooding and, in some cases, boil‑water advisories, though no drinking‑water contamination has been confirmed. The FBI, EPA and CISA issued a joint advisory warning that the campaign, suspected to involve Iranian‑linked actors, may exploit the Modbus‑TCP denial‑of‑service flaw CVE‑2017‑16740 to enable unauthenticated reprogramming.

Recent developments indicate the scope of Iranian-linked activity may extend beyond U.S. water utilities. In the United Kingdom, a small power generator was reportedly forced offline for four days in July 2026, though officials stated there was no threat to the national power supply. In the U.S., attackers have reportedly gained remote control over pumps and valves in states such as Arkansas, forcing utilities to switch to manual operations.

The situation has escalated alongside physical military tensions. Following U.S. military strikes near the Strait of Hormuz—described by President Donald Trump as a response to Iranian sea mines and missile attacks on a U.S. base in Jordan—the confrontation has expanded into cyberspace. Hackers linked to Iran have reportedly attempted to penetrate critical U.S. infrastructure, including water, energy, and telecommunications. While these attempts represent a shift toward targeting civilian-facing physical processes, they have not yet caused major service disruptions. Separately, the FBI continues to investigate an opportunistic data breach at Kansas-based Micro‑Comm, which remains distinct from the broader infrastructure campaign.

Entities

Iran · Environmental Protection Agency · United States · Federal Bureau of Investigation (FBI) · Minnesota

Claims

What the coverage asserts, and how many sources carry each claim.

Coverage disagrees

Sources make claims that cannot both be true. CLSTR reports the disagreement; it does not decide who is right.

  • "Cyberattacks have affected water and wastewater utilities in at least 12 U.S. states since late July 2026."

    vs

    "The attack affected water and wastewater facilities in at least seven U.S. states."

    One claim states the attack affected at least seven U.S. states, while another states it affected at least 12 U.S. states.

  • "Roughly six states have reported related cyber incidents."

    vs

    "The attack affected water and wastewater facilities in at least seven U.S. states."

    One claim asserts the attack affected at least seven states, while another claims only roughly six states reported incidents.

  • "Attacks caused operational disruptions such as pressure loss and flooding but did not compromise drinking‑water safety."

    vs

    "There is no evidence that the breach resulted in the operational compromise of any water system." itnerd.blog · www.csoonline.com · www.diariodelsur.com.co · nationalcybersecurity.com · www.independent.co.uk · +1 more

    One claim states there is no evidence of operational compromise, while another states the attacks caused operational disruptions like pressure loss and flooding.

Timeline

  1. 11 days ago

    [INTERNATIONAL] 2 sources
    US-Iran conflict expands to cyberattacks and military strikes

    The US-Iran conflict has escalated as Iranian-linked hackers target US critical infrastructure, including water and energy, following US military strikes near the Strait of Hormuz.

  2. 18 days ago

    [INTERNATIONAL] 4 sources
    Iran-linked cyberattacks target UK energy and US water infrastructure

    Iranian-linked cyberattacks targeted a small UK power generator and multiple US water facilities in July 2026, causing localized disruptions to energy and water infrastructure.

  3. 19 days ago

    [TECHNOLOGY] 13 sources
    U.S. water infrastructure faces wave of cyberattacks

    U.S. authorities are investigating widespread cyberattacks on water infrastructure, including a major data breach at technology supplier Micro-Comm and over 100 targeted internet-exposed utility systems.

  4. 29 days ago

    [INTERNATIONAL] 2 sources
    Iran suspected of cyberattacks on U.S. water infrastructure

    Iranian cyber actors are suspected of targeting U.S. water infrastructure in at least six states, marking an escalation in asymmetric cyber operations against the U.S. and Israel.

  5. about 1 month ago

    [TECHNOLOGY] 3 sources
    Iran suspected of targeting US water infrastructure in cyberattacks

    US investigators are looking into suspected Iranian cyberattacks targeting water infrastructure in several states, including Minnesota and Arkansas, amid ongoing debates over federal security regulations.

  6. about 1 month ago

    [TECHNOLOGY] 36 sources
    US Water Utilities Hit by Coordinated Cyberattacks Across At Least 12 States

    Coordinated cyberattacks on US water utilities in 12+ states compromised PLCs, causing control loss and pressure issues but no water contamination; FBI, EPA and CISA issued alerts, suspecting Iranian‑linked hij

  7. about 1 month ago

    [TECHNOLOGY] 41 sources
    US Water Utilities Hit by Iran-Linked Cyberattacks

    Coordinated cyberattacks on water utilities in at least seven U.S. states, affecting over 30 systems in Minnesota and others in New Jersey, Michigan and Georgia, targeted PLCs, forced manual operation, and are

  8. about 1 month ago

    [TECHNOLOGY] 73 sources
    US water system cyberattacks hit Minnesota, Michigan; FBI probes Iranian link

    Cyber attacks on water system PLCs hit over 30 sites in Minnesota and nine in Michigan; no service loss reported. FBI, CISA and EPA investigate possible Iranian hackers, while Trump blames Governor Walz.

  9. about 2 months ago

    [TECHNOLOGY] 66 sources
    Coordinated Cyberattack Hits Over 30 Minnesota Water Systems

    Over 30 Minnesota water systems were hit by a coordinated cyberattack on July 26‑27, targeting PLCs. No water contamination occurred. FBI, CISA and EPA are investigating; possible Iranian‑linked hackers are un‑

  10. about 2 months ago

    [TECHNOLOGY] 24 sources
    Coordinated cyberattack hits over 30 Minnesota water systems

    A coordinated cyberattack on July 26‑27 hit over 30 Minnesota water systems, prompting a state‑wide response; no water‑quality impact or public‑health advisory was reported.

Sources

1057thehawk.com · 1390granitecitysports.com · 680news.com · abc11.com · abc13.com · abc30.com · abc57.com · abc7.com · adevarul.ro · aijourn.com · aksam.com.tr · aksiyon.com.tr · albertleatribune.com · allblogthings.com · alphanews.org · amnews.com · antiguatribune.com · argusdelassurance.com · artsquest.org · athleticsasia.org · b2b-cyber-security.de · bangordailynews.com · barbadosgazette.com · bilder3.n-tv.de · blog.zealoptics.com · booktrib.com · brand-studio.fortune.com · breakingnews.com · buildbookbuzz.com · businesstechweekly.com · ca.sports.yahoo.com · cafetorah.com · californiaglobe.com · cbs58.com · cfodive.com · cnbcindonesia.com · cobbcountycourier.com · constructiondive.com · countryrebel.com · cremation.com · crooksandliars.com · cryptobriefing.com · csoonline.com.au · cyberscoop.com · cybersecuritynews.com · dailycaller.com · dailycallernewsfoundation.org · dailyMail.co.uk

This summary has been updated 41 times: see revision history