# US and UK infrastructure targeted in suspected Iran-linked's > Live situation record from CLSTR: https://clstr.news/situations/minnesota-water-systems-cyberattack > Updated: 2026-09-03T00:19:43.000Z. Sources: 224. Developments: 10. Since the late‑July 2026 intrusion that knocked a Minnesota water plant offline, coordinated attacks on internet‑exposed Rockwell Automation/Allen‑Bradley PLCs have been reported in at least twelve U.S. states, including Michigan, Georgia, New Jersey, and South Dakota. Utilities have lost monitoring and control, experienced pressure drops, localized flooding and, in some cases, boil‑water advisories, though no drinking‑water contamination has been confirmed. The FBI, EPA and CISA issued a joint advisory warning that the campaign, suspected to involve Iranian‑linked actors, may exploit the Modbus‑TCP denial‑of‑service flaw CVE‑2017‑16740 to enable unauthenticated reprogramming. Recent developments indicate the scope of Iranian-linked activity may extend beyond U.S. water utilities. In the United Kingdom, a small power generator was reportedly forced offline for four days in July 2026, though officials stated there was no threat to the national power supply. In the U.S., attackers have reportedly gained remote control over pumps and valves in states such as Arkansas, forcing utilities to switch to manual operations. The situation has escalated alongside physical military tensions. Following U.S. military strikes near the Strait of Hormuz—described by President Donald Trump as a response to Iranian sea mines and missile attacks on a U.S. base in Jordan—the confrontation has expanded into cyberspace. Hackers linked to Iran have reportedly attempted to penetrate critical U.S. infrastructure, including water, energy, and telecommunications. While these attempts represent a shift toward targeting civilian-facing physical processes, they have not yet caused major service disruptions. Separately, the FBI continues to investigate an opportunistic data breach at Kansas-based Micro‑Comm, which remains distinct from the broader infrastructure campaign. ## Claims - The attack affected water and wastewater facilities in at least seven U.S. states. (disputed by 18 sources) - Cyberattacks have affected water and wastewater utilities in at least 12 U.S. states since late July 2026. (disputed by 17 sources) - Attacks caused operational disruptions such as pressure loss and flooding but did not compromise drinking‑water safety. (disputed by 9 sources) - Roughly six states have reported related cyber incidents. (disputed by 7 sources) - There is no evidence that the breach resulted in the operational compromise of any water system. (disputed by 6 sources) - More than 30 community water systems in Minnesota were targeted by a coordinated cyberattack on July 26‑27, 2026. (corroborated by 27 sources) - No residents were asked to modify water usage and no water‑quality issues were reported. (corroborated by 23 sources) - Federal agencies FBI, CISA, and EPA are involved in the investigation and response. (corroborated by 23 sources) - The attack disrupted operational technology controlling pumps, wells and treatment equipment, targeting programmable logic controllers (PLCs). (corroborated by 21 sources) - Cities including Braham, Plymouth, South St. Paul and Maple Plain experienced temporary outages or disruptions. (corroborated by 20 sources) - CISA issued a warning weeks earlier about Iranian‑affiliated actors targeting water‑infrastructure control systems. (corroborated by 20 sources) ## Timeline ### 2026-09-03: US-Iran conflict expands to cyberattacks and military strikes The US-Iran conflict has escalated as Iranian-linked hackers target US critical infrastructure, including water and energy, following US military strikes near the Strait of Hormuz. 2 sources. https://clstr.news/cluster/us-iran-conflict-expands-to-cyberattacks-and-military-strikes ### 2026-08-27: Iran-linked cyberattacks target UK energy and US water infrastructure Iranian-linked cyberattacks targeted a small UK power generator and multiple US water facilities in July 2026, causing localized disruptions to energy and water infrastructure. 4 sources. https://clstr.news/cluster/iran-linked-cyberattacks-target-uk-energy-and-us-water-infrastructure ### 2026-08-26: U.S. water infrastructure faces wave of cyberattacks U.S. authorities are investigating widespread cyberattacks on water infrastructure, including a major data breach at technology supplier Micro-Comm and over 100 targeted internet-exposed utility systems. 13 sources. https://clstr.news/cluster/micro-comm-water-technology-supplier-targeted-in-fbi-investigated-cyberattack ### 2026-08-16: Iran suspected of cyberattacks on U.S. water infrastructure Iranian cyber actors are suspected of targeting U.S. water infrastructure in at least six states, marking an escalation in asymmetric cyber operations against the U.S. and Israel. 2 sources. https://clstr.news/cluster/iran-suspected-of-cyberattacks-on-us-water-infrastructure ### 2026-08-09: Iran suspected of targeting US water infrastructure in cyberattacks US investigators are looking into suspected Iranian cyberattacks targeting water infrastructure in several states, including Minnesota and Arkansas, amid ongoing debates over federal security regulations. 3 sources. https://clstr.news/cluster/iran-suspected-of-targeting-us-water-infrastructure-in-cyberattacks ### 2026-08-05: US Water Utilities Hit by Coordinated Cyberattacks Across At Least 12 States Coordinated cyberattacks on US water utilities in 12+ states compromised PLCs, causing control loss and pressure issues but no water contamination; FBI, EPA and CISA issued alerts, suspecting Iranian‑linked hij 36 sources. https://clstr.news/cluster/rockwell-plcs-exposed-online-22-in-us-water-attack-cities ### 2026-08-03: US Water Utilities Hit by Iran-Linked Cyberattacks Coordinated cyberattacks on water utilities in at least seven U.S. states, affecting over 30 systems in Minnesota and others in New Jersey, Michigan and Georgia, targeted PLCs, forced manual operation, and are 41 sources. https://clstr.news/cluster/home-water-filtration-and-senior-emergency-supply-guidance-highlighted ### 2026-08-01: US water system cyberattacks hit Minnesota, Michigan; FBI probes Iranian link Cyber attacks on water system PLCs hit over 30 sites in Minnesota and nine in Michigan; no service loss reported. FBI, CISA and EPA investigate possible Iranian hackers, while Trump blames Governor Walz. 73 sources. https://clstr.news/cluster/us-cisa-warns-of-rising-cyberattacks-on-water-systems-after-minnesota-attacks ### 2026-07-29: Coordinated Cyberattack Hits Over 30 Minnesota Water Systems Over 30 Minnesota water systems were hit by a coordinated cyberattack on July 26‑27, targeting PLCs. No water contamination occurred. FBI, CISA and EPA are investigating; possible Iranian‑linked hackers are un‑ 66 sources. https://clstr.news/cluster/minnesota-water-systems-hit-by-coordinated-cyberattack-fbi-joins-response ### 2026-07-27: Coordinated cyberattack hits over 30 Minnesota water systems A coordinated cyberattack on July 26‑27 hit over 30 Minnesota water systems, prompting a state‑wide response; no water‑quality impact or public‑health advisory was reported. 24 sources. https://clstr.news/cluster/minnesota-water-utilities-cyberattack-disrupts-services-in-30-communities --- Cite as: US and UK infrastructure targeted in suspected Iran-linked's. CLSTR, https://clstr.news/situations/minnesota-water-systems-cyberattack