Iran-linked cyberattacks target US water utilities
Coordinated attacks on water facilities across dozens of states raise concerns.
1Scope of the attacks
Since July 2026, water treatment plants in over 30 US communities have been cyberattacked. Water and wastewater companies in at least seven states reported incidents, with some attacks disrupting operations. Facilities in Minnesota, Arkansas, Georgia, New Jersey, and Michigan were targeted. The coordinated nature and wide geographic spread of the attacks alarmed authorities.
2Suspects
The US government hasn't officially attributed the attacks, but Iran is the prime suspect. The Cybersecurity and Infrastructure Security Agency (CISA) had warned days before the Minnesota attacks that Iranian hackers were targeting internet-connected devices in water systems. According to Washington Post, intelligence agencies are confident the Islamic Revolutionary Guard Corps (IRGC) is responsible.
3Political tension
The attacks may be retaliation following the six-month war between the US and Iran. Former President Trump blamed Minnesota rather than Iran, possibly due to the state's Democratic governor Tim Walz being Kamala Harris's 2024 running mate. Intelligence officials might be hesitating to make official attributions to avoid contradicting Trump's claims.
4Hackers' history
Iranian hackers have previously targeted US critical infrastructure. In March 2026, a group called Handala disrupted operations of medical tech giant Stryker. The US government claimed Handala was operated by Iran's Ministry of Intelligence. The group later took credit for hacking FBI director Kash Patel's personal Gmail. However, until now, Iranian hackers had limited success against US targets.
5System vulnerabilities
The US has over 150,000 water systems, many operated by local companies lacking cybersecurity resources or expertise. Cybersecurity firm Forescout found more than 2,800 exposed controllers in US water systems. While exposure doesn't guarantee hacker control, recent attacks have shown such breaches are possible. Many critical infrastructure systems remain dangerously exposed online.
6Physical impacts
Some cyberattacks caused loss of pressure that could've allowed untreated groundwater into pipes. Braham, Minnesota took its water plant offline for hours, urging 1,700 residents to conserve water. Maple Plain briefly declared an emergency. A Georgia county advised residents to boil water as a precaution. These incidents demonstrated real-world consequences of cyber intrusions.
7Psychological impact
The worst effect may be psychological. Extensive media coverage has made Americans worry about water safety - potentially part of the hackers' goal to spread panic. The attacks highlighted vulnerabilities in critical infrastructure that people take for granted. Experts warn such psychological warfare could become more common in state-sponsored cyber campaigns.
8Future risks
These attacks may signal significant escalation in Iran's cyber warfare capabilities. Previously, Iranian hackers were thought to conduct opportunistic, isolated attacks. This coordinated campaign shows critical infrastructure security needs urgent strengthening. Experts call for improved cybersecurity standards, especially for locally-operated systems that are often most vulnerable.
Original article: TechCrunch — ABD su sistemlerine yönelik İran kaynaklı siber saldırılar