Water-Utility Cyberattacks Surge Beyond Early Reports, 100+ Targets Confirmed

A month after a cyberattack on U.S. water facilities began, federal authorities say the scope was far larger than first reported: more than 100 water providers across 12 states were targeted, many via PLCs connected to cellular modems. Experts say underfunded, smaller utilities struggle to detect incidents, and investigators attribute the operations to Iranian-state actors. The assault affected systems coast-to-coast, including Wisconsin, Michigan and Minnesota, with Illinois not listed in the official tally.