CYBERATTACKS HIT US WATER SYSTEMS IN 7 STATES

WASHINGTON (August 2, 2026) — A coordinated wave of cyberattacks has successfully breached municipal water systems across at least seven U.S. states, forcing utilities to abandon automated operations and revert to manual control to prevent catastrophic infrastructure failures. The breaches highlight a severe and escalating vulnerability in America's critical infrastructure, prompting emergency warnings from the FBI and the Environmental Protection Agency (EPA).According to a joint federal advisory and investigations reported by CBS News and Quartz, malicious actors remotely infiltrated internet-facing programmable logic controllers (PLCs)—specifically widely used Rockwell Automation/Allen-Bradley models—at local water and wastewater treatment facilities. Once inside the networks, the attackers systematically altered IP addresses, changed administrative passwords, and locked legitimate operators out of the monitoring systems. The consequences of the cyber intrusion extended beyond mere digital trespassing. Authorities confirm the attacks caused tangible physical disruptions, including sudden drops in water pressure and localized flooding incidents at affected facilities. While public officials emphasize that no drinking water supplies have been contaminated or deemed unsafe for public consumption, the ability of unidentified hackers to remotely manipulate critical water flow has triggered massive national security alarms. The scope of the attacks encompasses at least seven states, with Minnesota and Michigan being the first to publicly confirm the intrusions. In Minnesota alone, over 30 community water systems were targeted. Operators were forced into sustained manual operations to maintain basic water and sewer services, effectively overriding the compromised hardware. Federal investigators are actively probing whether Iranian state-backed hackers orchestrated the campaign. State officials familiar with the inquiry note that the attackers made no ransom demands,