Topic overview
In brief
- Federal authorities warned of cyberattacks targeting water and wastewater systems in at least seven states.
- Minnesota reported over 30 targeted water systems, while South Dakota and California also experienced incidents.
- The investigation is ongoing, with concerns about potential links to Iranian hackers and the need for improved cybersecurity.
Summary
In the United States, a series of cyber incidents targeting water and wastewater infrastructure has raised alarms among utilities across several states. The FBI and the Environmental Protection Agency (EPA) issued a warning on July 30, 2026, indicating that malicious cyber actors had attacked water and wastewater systems in at least seven states since July 27, 2026. These attacks have led to operational disruptions and exposed vulnerabilities in critical public services, prompting federal authorities to investigate the incidents thoroughly.
Minnesota has reported the largest cluster of attacks, with state officials confirming that over 30 water systems were targeted. Although the attacks were contained and did not pose a threat to drinking water supplies, the situation has heightened concerns about the security of water infrastructure. In South Dakota, Rapid City officials announced that a wastewater lift station was also targeted, but they assured the public that drinking water quality and safety were not compromised. Meanwhile, California is investigating a separate incident involving California Water Service, which was reportedly breached by a hacking group, although no disruptions to water service were reported.