# Iran-linked cyberattacks target US water utilities Coordinated attacks on water facilities across dozens of states raise concerns. - **Source:** [TechCrunch](https://techcrunch.com) - **Published:** 2026-08-14 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/54c75a1a-2499-4108-9c74-3e33c19cdff5 ## Scope of the attacks Since July 2026, water treatment plants in over 30 US communities have been cyberattacked. Water and wastewater companies in at least seven states reported incidents, with some attacks disrupting operations. Facilities in Minnesota, Arkansas, Georgia, New Jersey, and Michigan were targeted. The coordinated nature and wide geographic spread of the attacks alarmed authorities. ## Suspects The US government hasn't officially attributed the attacks, but Iran is the prime suspect. The Cybersecurity and Infrastructure Security Agency (CISA) had warned days before the Minnesota attacks that Iranian hackers were targeting internet-connected devices in water systems. According to Washington Post, intelligence agencies are confident the Islamic Revolutionary Guard Corps (IRGC) is responsible. ## Political tension The attacks may be retaliation following the six-month war between the US and Iran. Former President Trump blamed Minnesota rather than Iran, possibly due to the state's Democratic governor Tim Walz being Kamala Harris's 2024 running mate. Intelligence officials might be hesitating to make official attributions to avoid contradicting Trump's claims. ## Hackers' history Iranian hackers have previously targeted US critical infrastructure. In March 2026, a group called Handala disrupted operations of medical tech giant Stryker. The US government claimed Handala was operated by Iran's Ministry of Intelligence. The group later took credit for hacking FBI director Kash Patel's personal Gmail. However, until now, Iranian hackers had limited success against US targets. ## System vulnerabilities The US has over 150,000 water systems, many operated by local companies lacking cybersecurity resources or expertise. Cybersecurity firm Forescout found more than 2,800 exposed controllers in US water systems. While exposure doesn't guarantee hacker control, recent attacks have shown such breaches are possible. Many critical infrastructure systems remain dangerously exposed online. ## Physical impacts Some cyberattacks caused loss of pressure that could've allowed untreated groundwater into pipes. Braham, Minnesota took its water plant offline for hours, urging 1,700 residents to conserve water. Maple Plain briefly declared an emergency. A Georgia county advised residents to boil water as a precaution. These incidents demonstrated real-world consequences of cyber intrusions. ## Psychological impact The worst effect may be psychological. Extensive media coverage has made Americans worry about water safety - potentially part of the hackers' goal to spread panic. The attacks highlighted vulnerabilities in critical infrastructure that people take for granted. Experts warn such psychological warfare could become more common in state-sponsored cyber campaigns. ## Future risks These attacks may signal significant escalation in Iran's cyber warfare capabilities. Previously, Iranian hackers were thought to conduct opportunistic, isolated attacks. This coordinated campaign shows critical infrastructure security needs urgent strengthening. Experts call for improved cybersecurity standards, especially for locally-operated systems that are often most vulnerable. ## Sources covering this story - https://techcrunch.com/2026/08/14/what-we-know-about-the-alleged-iranian-hacks-on-u-s-water-utilities/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._