FBI Warns Hackers Are Probing Water Systems in 7 States
Hackers have hit municipal water systems in at least seven states this week, raising fresh alarms over the security of one of the country’s most
Hackers have hit municipal water systems in at least seven states this week, raising fresh alarms over the security of one of the country’s most basic public services. Federal officials say the activity is already disrupting operations at some utilities.
The warning matters because water plants are increasingly being treated as soft targets. In a public service announcement on Thursday, the FBI and the Environmental Protection Agency urged utilities nationwide to stay alert after water and wastewater operators reported incidents to investigators.
Federal agencies warn of broader risk
The agencies did not identify the states involved. They said some of the malicious activity had degraded water operations, though they did not say how widespread the impact had been.
The notice comes after a separate attack on more than 30 municipal water facilities in Minnesota, according to a law enforcement official. That incident carried hallmarks of Iranian meddling and remains under investigation. State officials have not publicly pinned the blame on any actor.
A spokesperson for Minnesota’s information technology services agency said Thursday there was no indication the breaches contaminated any municipal water supplies. That detail offered some reassurance, but only on the narrow question of water quality. The attack still exposed how quickly a digital intrusion can reach local infrastructure that people rely on every day.
Boil notices and manual work
The federal Cybersecurity and Infrastructure Security Agency also weighed in separately, saying some larger attacks on water infrastructure have led to boil water notices and forced utilities into sustained manual operations. CISA did not say where those incidents occurred.
That distinction matters. Even when hackers do not directly poison water, they can still force plant operators off automated systems and into slower, labor-intensive routines. For residents, that can mean disrupted service, added caution, and a reminder that an attack on a municipal utility can spill into daily life fast.
So far, federal officials have not named the states involved in this week’s incidents, and Minnesota officials have not publicly attributed the malicious activity in their state. But the pace of the warnings suggests investigators are seeing a pattern that extends beyond one place.
The FBI and EPA said utilities should treat the reports as a signal to harden defenses. The investigation is continuing.
