Multi-State Cyberattacks Target U.S. Water Utilities, FBI Warns

U.S. municipal water systems in at least seven states were hit by cyberattacks this week, with more than 30 Minnesota facilities affected. Hackers reportedly gained remote access to internet-facing devices, changed IP addresses and passwords, and degraded monitoring, but no contamination has been reported. The FBI and EPA issued a public advisory urging utilities to harden defenses—such as isolating PLCs behind secure gateways, enforcing strong passwords, and restricting device communications—while attribution is still under investigation amid concerns of Iran-linked cyber activity.