Iran-Linked Hackers Hit U.S. Water Systems in 7 States
Tap title to read story
The FBI is investigating a wave of cyberattacks targeting water systems across at least seven U.S. states, with officials suspecting Iranian-backed hackers are responsible. Georgia and Michigan are the latest states to confirm hostile cyber activity, joining Minnesota and others in what has become a coordinated campaign against critical infrastructure. The attacks began between July 26 and 27, 2026, when hackers targeted more than 30 community water systems in Minnesota.
The FBI advisory, posted last week, confirmed that "since 27 July 2026, Water and Wastewater Sector (WWS) utility companies in at least seven states have reported incidents to the FBI, and some of that activity degraded water operations." Michigan officials reported nine water systems experienced hostile cyber activity, while Georgia also confirmed it was affected.
The attackers are targeting programmable logic controllers (PLCs) made by Rockwell Automation and Allen-Bradley, specifically the MicroLogix 1100 and 1400 series. After gaining access, threat actors remotely modified passwords and disconnected devices by changing IP addresses, locking out operators. In some cases, attackers modified PLC project files, causing loss of water pressure and flooding. A broader CISA advisory warned that Schneider Electric, Siemens, and other PLC brands are also being targeted.
Security researchers at Tenable were among the first to publicly suspect Iran's involvement, citing similarities with previous attacks by the CyberAv3ngers group, which the U.S. government says operates under Tehran's control. The FBI has not formally attributed the campaign but is investigating. The attacks have forced some utilities into manual operations. A memo from the Minnesota Bureau of Criminal Apprehension stated the hackers' goal appeared to be "to cause loss of system pressure and subsequent potential contamination of water supply."
No contamination or public health consequences have been reported, though some utili
More context
Timeline
- Historical Events:
- · On 2023, IRGC-linked hackers breached U.S. water facilities using default passwords.
- · On 2016, DOJ charged Iranian hackers for targeting a New York dam.
- On July 22, 2026, CISA/FBI warned Iranian hackers were targeting U.S. PLC systems.
- · On April 2026, CISA warned Iran-linked actors targeted Rockwell Automation PLCs.
- · Since February 2026, Iran has stepped up cyberattacks amid ongoing U.S. war.
- On July 26-27, 2026, over 30 Minnesota community water systems were targeted.
- · On July 27, 2026, Clayton County, Georgia issued a boil water advisory after disruption.
- · On July 30, 2026, FBI/EPA issued nationwide warning of attacks in at least seven states.
- · On August 1, 2026, Michigan confirmed nine water systems reported hostile cyber activity.
- · On August 3, 2026, Georgia confirmed it was affected by the cyberattacks.
- · Political Reactions:
- · On July 31, 2026, President Trump blamed Minnesota's governor, not Iran, for attacks.
- · Official Response:
- · On August 4, 2026, Senate Intelligence Committee held a closed hearing on Iran cyber
Why it matters
Immediate US Impact (10 words): Seven states' water systems breached; public health threatened but contained. · Long-term US Impact (10 words): Critical infrastructure vulnerability exposes America to sophisticated foreign cyber warfare. · Most Affected Groups (10 words): Small municipal water utilities, Minnesota, Michigan, Georgia, and rural communities. · Reader Priority (10 words): Monitor local water advisories and demand federal infrastructure cybersecurity accountability.
Coverage notes
· Left: Trump's denial of Iranian involvement undermines national security and experts. · Center: FBI investigates cyberattacks across seven states; Iran suspected but unconfirmed. · Right: Trump blames Minnesota's incompetence; Iran unlikely responsible for the breaches
Primary report
FBI advisory on July 30, 2026, confirmed incidents in at least seven states.
Sources
JQJO Editorial Desk · Human reviewed · AI assisted. Report a correction.
