OT / ICS · 54 days ago
The real issue is that internet-reachable control gear in water systems was in scope across multiple states. Most sites kept running, so the easy reading is “no outage, no problem,” but that misses that attackers were able to touch the control plane for pumps, lift stations, and plant operations.
Minnesota first reported OT targeting at more than 30 water and wastewater facilities. Michigan confirmed malicious cyber activity at a small number of communities, Rapid City reported a lift-station incident in its wastewater system, and reporting now puts at least seven states in the campaign.
For operators with exposed PLCs or remote OT access, the risk is not just service interruption. It is that shared industrial control paths can be reached and tested across many sites even when public water stays safe today.
4 sources covering this story
The Record from Recorded Future
Cyberattacks on water systems expand to 12 states as South Dakota, Georgia announce incidents
Water utilities in at least 12 states have reported cyberattacks on their operational technology, as the scope of a campaign allegedly linked to Iranian hackers continues to grow.
Water system cyberattacks spread to Georgia, Michigan amid US-Iran conflict
Trump rejects Tehran theory, blames 'grossly incompetent' governor of Minnesota instead
OT security coalition urges Congress, CISA to enact reforms amid water sector hacks
Iran-nexus hackers are suspected in a broad campaign targeting drinking and wastewater sites in at least seven U.S. states.
US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States
Michigan, South Dakota, and Georgia are reportedly on the list of states whose water systems have been targeted by Iran-linked hackers.
Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers
Iran has the “geopolitical motivations” and a recent history of targeting water systems, experts pointed out.
Part of the PlainSec briefing for 2026-08-03