FBI warns of cyberattacks on municipal water systems in 7 states
Cyberattacks on municipal water systems have been reported in at least seven states this week, and federal officials are warning that the threat is not
Cyberattacks on municipal water systems have been reported in at least seven states this week, and federal officials are warning that the threat is not just theoretical. The FBI and the Environmental Protection Agency said Thursday that hackers are trying to disrupt critical water infrastructure.
The warning lands with real consequences. Some utilities have already reported malicious activity that degraded water operations, while federal agencies are pressing water and wastewater operators nationwide to tighten defenses fast.
Federal agencies sound the alarm
In a public service announcement Thursday, the FBI and EPA said water and wastewater utilities had reported incidents to the FBI. The agencies did not identify the states involved, but said the activity was serious enough to merit a nationwide alert.
The notice comes after hackers targeted more than 30 municipal water facilities in Minnesota in an attack that had hallmarks of Iranian meddling, according to a law enforcement official. That case is still under investigation. So far, Minnesota officials say there is no indication the breaches contaminated any municipal water supplies.
Pressure on water operators grows
Federal concern has widened beyond Minnesota. In a separate alert, the Cybersecurity and Infrastructure Security Agency said some larger attacks on water infrastructure had “resulted in boil water notices and sustained manual operations,” though it did not say where those incidents happened.
The details point to a system under strain. Water utilities are not just dealing with network intrusions; they are facing the possibility of losing automated controls and switching back to manual work, a slower and more fragile way to keep service running. For residents, that can mean disruptions, boil water notices, and more uncertainty over the safety and reliability of supply.
What remains unclear
Minnesota officials and the U.S. government have not publicly attributed the malicious activity. Federal agencies have kept the warning broad, urging utilities to treat the threat as immediate even as investigators work through the Minnesota case and the other reported incidents.
The episode underscores how exposed municipal water systems remain. The next move will come from investigators and utilities that now have to determine whether the attacks were isolated or part of a wider push against critical infrastructure.
