Federal officials warned of increased cyber activity targeting municipal water and wastewater systems after incidents were reported in at least seven states. Attackers gained access to internet-connected operational technology used to monitor and control water infrastructure, changing passwords and disrupting some operations. Although certain facilities experienced pressure loss, flooding, boil-water notices, or temporary reliance on manual controls, officials reported no evidence that drinking-water safety was compromised.
The warning followed coordinated attacks against more than 30 community water systems in Minnesota. Investigators had not publicly attributed the incidents to a specific actor, although the activity occurred amid broader federal warnings about Iranian-linked threats to U.S. critical infrastructure.
Why it matters: The incidents demonstrate the risks created when operational technology and industrial control systems remain directly accessible from the internet, particularly at small utilities with limited cybersecurity personnel and resources.
Source: NBC News
Authors: Daniel Arkin, Michael Kosnar, and Ben Goggin
Published: July 31, 2026