A wave of cyberattacks has targeted municipal water and wastewater systems in at least 12 states, prompting federal authorities to launch an urgent investigation. The incidents, which began in late July, involve hackers remotely accessing internet-connected industrial control devices to disrupt operations. While officials report that public health and water quality have not been compromised, the attacks have forced some utilities to switch to manual operations, causing temporary pressure loss and, in some cases, boil-water notices.
The systems being targeted are known as programmable logic controllers, or PLCs, which are essential for monitoring and controlling pumps and other water treatment equipment. Investigators have found that hackers are exploiting these devices by changing administrator passwords and modifying IP addresses, effectively locking local operators out of their own systems. This method of intrusion has raised significant alarms regarding the security of critical infrastructure that remains exposed to the public internet.
Federal agencies, including the FBI and the Environmental Protection Agency, are currently working with state officials to secure affected facilities and prevent further disruptions. While intelligence officials are examining potential links to Iranian-affiliated actors—citing similarities to past campaigns—no formal attribution has been made. Investigators are also exploring the possibility that other actors may be mimicking these tactics to sow confusion or shift blame.
For the general public, the primary impact has been operational, with many communities experiencing temporary shutdowns or the need for manual oversight to maintain service. Experts have long warned that the water sector, which often relies on aging equipment and limited cybersecurity resources, is particularly vulnerable to such digital threats. As the investigation continues, federal authorities are urging all water utilities to immediately disconnect any internet-facing control devices to mitigate the risk of further interference.