TECHNOLOGY

Iran-Linked Hackers Hit U.S. Water Systems in 7 States

▪

Read, Watch or Listen

Media Bias Meter

Sources: 21

Center 100%

Sources: 21

The FBI is investigating a wave of cyberattacks targeting water systems across at least seven U.S. states, with officials suspecting Iranian-backed hackers are responsible. Georgia and Michigan are the latest states to confirm hostile cyber activity, joining Minnesota and others in what has become a coordinated campaign against critical infrastructure. The attacks began between July 26 and 27, 2026, when hackers targeted more than 30 community water systems in Minnesota. The FBI advisory, posted last week, confirmed that "since 27 July 2026, Water and Wastewater Sector (WWS) utility companies in at least seven states have reported incidents to the FBI, and some of that activity degraded water operations." Michigan officials reported nine water systems experienced hostile cyber activity, while Georgia also confirmed it was affected. The attackers are targeting programmable logic controllers (PLCs) made by Rockwell Automation and Allen-Bradley, specifically the MicroLogix 1100 and 1400 series. After gaining access, threat actors remotely modified passwords and disconnected devices by changing IP addresses, locking out operators. In some cases, attackers modified PLC project files, causing loss of water pressure and flooding. A broader CISA advisory warned that Schneider Electric, Siemens, and other PLC brands are also being targeted. Security researchers at Tenable were among the first to publicly suspect Iran's involvement, citing similarities with previous attacks by the CyberAv3ngers group, which the U.S. government says operates under Tehran's control. The FBI has not formally attributed the campaign but is investigating. The attacks have forced some utilities into manual operations. A memo from the Minnesota Bureau of Criminal Apprehension stated the hackers' goal appeared to be "to cause loss of system pressure and subsequent potential contamination of water supply." No contamination or public health consequences have been reported, though some utili

Prepared by Jonathan Pierce and reviewed by editorial team.

Timeline of Events

Historical Events:
· On 2023, IRGC-linked hackers breached U.S. water facilities using default passwords.
· On 2016, DOJ charged Iranian hackers for targeting a New York dam.
On July 22, 2026, CISA/FBI warned Iranian hackers were targeting U.S. PLC systems.
· On April 2026, CISA warned Iran-linked actors targeted Rockwell Automation PLCs.
· Since February 2026, Iran has stepped up cyberattacks amid ongoing U.S. war.
On July 26-27, 2026, over 30 Minnesota community water systems were targeted.
· On July 27, 2026, Clayton County, Georgia issued a boil water advisory after disruption.
· On July 30, 2026, FBI/EPA issued nationwide warning of attacks in at least seven states.
· On August 1, 2026, Michigan confirmed nine water systems reported hostile cyber activity.
· On August 3, 2026, Georgia confirmed it was affected by the cyberattacks.
· Political Reactions:
· On July 31, 2026, President Trump blamed Minnesota's governor, not Iran, for attacks.
· Official Response:
· On August 4, 2026, Senate Intelligence Committee held a closed hearing on Iran cyber

News Intelligence

Immediate US Impact (10 words): Seven states' water systems breached; public health threatened but contained.
· Long-term US Impact (10 words): Critical infrastructure vulnerability exposes America to sophisticated foreign cyber warfare.
· Most Affected Groups (10 words): Small municipal water utilities, Minnesota, Michigan, Georgia, and rural communities.
· Reader Priority (10 words): Monitor local water advisories and demand federal infrastructure cybersecurity accountability.

Media Bias

Articles Published:: 21
Right Leaning:: 0
Left Leaning:: 0
Neutral:: 21

Explain Framing

· Left: Trump's denial of Iranian involvement undermines national security and experts. · Center: FBI investigates cyberattacks across seven states; Iran suspected but unconfirmed. · Right: Trump blames Minnesota's incompetence; Iran unlikely responsible for the breaches