Hackers targeted municipal water systems in 7 states this week, FBI says

Key Points:

• Cyberattacks targeting municipal water systems have been reported in at least seven U.S. states this week, prompting warnings from the FBI and EPA about hackers attempting to disrupt critical water infrastructure.
• More than 30 municipal water facilities in Minnesota were targeted in an attack suspected to involve Iranian-backed hackers, though no contamination of water supplies has been reported and no official attribution has been made.
• President Donald Trump criticized Minnesota’s leadership, blaming the state and its governor for the breaches, while federal agencies have emphasized the need for enhanced cybersecurity measures across all water utilities.
• The FBI and EPA advisory urged water system operators to secure programmable logical controllers (PLCs) by removing them from direct internet exposure, using strong passwords, and implementing access controls to prevent unauthorized access.
• The attacks highlight vulnerabilities in U.S. infrastructure amid escalating tensions with Iran, with prior warnings issued about Tehran-linked hackers targeting critical infrastructure systems, including water utilities, in 2023 and 2024.