Investigators probe potential Iranian link to US water system cyberattacks

Federal investigators are examining a series of cyberattacks that disrupted water treatment facilities in at least 12 states, looking for possible links to Iran. The probe follows reports that hackers accessed control systems, causing temporary shutdowns and prompting public health alerts. The attacks, first reported in early June, targeted supervisory control and data acquisition (SCADA) networks used to monitor pumps and chemical dosing. No major contamination was found, but the incidents highlighted the vulnerability of critical infrastructure to remote intrusion. The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency and the FBI are coordinating the inquiry. Officials have not publicly named a specific Iranian group, but intelligence sources have noted similarities to previous campaigns attributed to Tehran‑linked actors. Water utilities in Ohio, Texas and Arizona among those affected have since restored normal operations. If a foreign state is confirmed, the findings could trigger diplomatic responses and push utilities to accelerate cybersecurity upgrades. In the meantime, regulators are urging all water providers to review emergency response plans and apply recommended security patches. Investigators expect to release a preliminary assessment within weeks, while lawmakers consider legislation to strengthen oversight of critical‑infrastructure cyber defenses.