At least 12 states report cyberattacks on water systems possibly linked to Iran

Cyberattacks targeting U.S. water systems have been reported in at least a dozen states, with officials suspecting a link to Iran-backed hackers. Sources familiar with the matter revealed the widespread nature of the attacks to CBS News.

States including Michigan, Minnesota, Georgia, New Jersey, and South Dakota have experienced these cyber incidents. In Minnesota alone, over 30 community water systems were affected. In Georgia, the Clayton County Water Authority, serving 300,000 customers, reported a water pressure drop and a boil water advisory due to cyber activity last month, though service was restored within hours.

Some utilities have lost essential remote-control functions, compelling operators to revert to manual systems. Hackers have reportedly gained remote access to pumps, valves, and water pressure controls. Officials have assured that the cyberattacks have not compromised the safety of drinking water thus far.

Federal agencies, including the FBI, EPA, and CISA, issued a warning on July 30 about cyber threat actors accessing online infrastructure for water and wastewater systems in at least seven states, leading to a loss of monitoring and control. Water agencies were advised to disconnect from the internet and enhance security measures. While investigators suspect Iran-backed hackers, particularly referencing tactics used by the CyberAv3ngers group linked to the Iranian Revolutionary Guard, no formal attribution has been made.