Coordinated cyberattack targets U.S. water systems, raising security alarms

A coordinated cyberattack hit the operational technology behind more than 30 U.S. water systems, including in Minnesota, over July 26–27, forcing some facilities to go offline or operate manually; Minnesota reported no drinking-water quality issues. Investigators say Iranian-affiliated actors are the leading, though not yet confirmed, suspects. The incident underscores vulnerabilities in aging, internet-connected water controls and the cybersecurity gaps facing smaller utilities, prompting CISA and EPA to urge isolating vital systems from untrusted networks and tightening access. Residents should follow official guidance, maintain emergency water, and beware scams as the nation reassesses water-system protections across roughly 170,000 U.S. facilities.