Threats & Adversaries · APT / Espionage

Coordinated Water Utility Hits Span a Dozen States

Multiple U.S. water utilities were hit in coordinated cyberattacks over the past two weeks, with incidents reported in around a dozen states and officials in Minnesota saying water treatment plants in more than 30 communities were affected. The FBI said some of the attacks degraded water operations; local emergencies and boil-water advisories followed in some places.

The reported pattern fits small, internet-connected plants rather than one big utility. TechCrunch says the attacks lined up with CISA warnings about exposed devices in water and energy systems, which matters because under-resourced operators often run the same remote control gear with less security and less staff to spot abuse.

If your city or district depends on a local water or wastewater utility, the relevant risk is a coordinated hit across many small sites, not a single dramatic outage at a major provider. That changes the threat model from isolated nuisance to community-level disruption.

1 source · Aug 14

Timeline

Sources

Part of the PlainSec briefing for 2026-08-15

Every edition of this story: Coordinated Water Utility Hits Span a Dozen States

More from today