Iran Suspected in Cyberattacks on Water Facilities Across 7 U.S. States

Water systems in at least seven U.S. states have been targeted by malicious cyberattacks, with authorities suspecting Iran's involvement. The breaches, which began around November 27, have raised alarms about the security of the nation's critical infrastructure.

While the Federal Bureau of Investigation (FBI) and the Environmental Protection Agency (EPA) issued a joint warning, they have not definitively attributed the attacks to Iran. However, officials point to a recent increase in Iranian cyber activity against the U.S. and Middle Eastern countries following the outbreak of the Israel-Iran conflict five months prior.

“

At least seven water and wastewater utilities have been subjected to malicious cyberattacks since at least November 27.

Minnesota and Michigan have confirmed they were affected, and the New York Times reports that more states may have been targeted. Although no drinking water has been confirmed as contaminated, the attacks have disrupted some water operations. State governments nationwide are now on alert, monitoring the potential vulnerability of computers that control water quality, including chemical treatment levels and water pressure.

“

What is unprecedented in this situation is that there is a direct and tangible impact on actual industrial control systems within U.S. critical infrastructure.

Experts note that sophisticated cyberattacks often take months to trace to their origin. Alex Olshansky, who previously tracked Iranian hacking for the U.S. government, told the New York Times that Iran has been conducting widespread hacking campaigns since February. He highlighted that the current attacks are unprecedented due to their direct and tangible impact on actual industrial control systems within U.S. critical infrastructure.

In response, authorities have recommended preventative measures such as disconnecting operational devices from the internet, strengthening passwords, and replacing outdated equipment. However, Nate George, mayor of Braham, Minnesota, expressed concern about the cost of upgrading IT infrastructure, stating, "The most worrying thing going forward is how we can move toward a safer system," adding, "The improvement of IT infrastructure costs a lot of money, but we are a very small municipality."

“

The most worrying thing going forward is how we can move toward a safer system. The improvement of IT infrastructure costs a lot of money, but we are a very small municipality.