Cyberattacks hit water systems in seven US states, Iran suspected

A wave of cyberattacks has targeted water and wastewater systems across at least seven US states, with officials increasingly suspecting Iranian hackers. The FBI and EPA warned that utilities in seven states have been hit since July 27, 2026, with attacks disabling digital controls and, in some cases, forcing manual operations Source: Engadget. Minnesota reported over 30 affected systems, and Michigan later confirmed nine Source: AP News. No culprit has been officially identified, but a leaked memo ties the Minnesota attacks to Iran Source: Wired. The attackers made no financial demands, suggesting state sponsorship Source: Tom's Hardware.

Impact and response

Authorities say the attacks have not compromised drinking water safety, though some systems experienced outages and boil-water notices Source: CNA. The city of Braham, Minnesota, briefly asked residents to conserve water Source: AP News. The FBI and CISA have advised utilities to disconnect internet-facing controllers and strengthen passwords Source: The Next Web. The attacks exploited unsecured controllers and default passwords, highlighting the vulnerability of small, underfunded utilities Source: The Next Web.

Attribution dispute

While federal officials suspect Iran, President Donald Trump has baselessly blamed Minnesota's governor, Tim Walz, saying, "I think Minnesota is behind it" Source: Gizmodo. Walz, in turn, blamed Trump's federal workforce cuts for increased vulnerability Source: Al Jazeera. Experts note the attacks align with prior Iranian-linked campaigns, but formal attribution remains pending Source: AP News.