Cyberattacks Target Water Systems Across Seven States

Multiple U.S. agencies have confirmed ongoing cyberattacks targeting water systems across at least seven states, raising concerns about the safety of Americans' drinking water. These attacks, which began in late July, involve malicious cyber actors remotely accessing internet-connected devices at water system facilities. The Federal Bureau of Investigation (FBI) issued a public service announcement on July 30, detailing the nature of these intrusions. According to the FBI alert, the Environmental Protection Agency (EPA) is aware that water and wastewater utility companies in multiple states have reported these attacks. The operational effects reported to the FBI have included loss of pressure and flooding within the water systems. The FBI specifically noted that a loss of pressure could potentially allow untreated groundwater to seep into pipes, compromising water quality. The Cybersecurity and Infrastructure Security Agency (CISA) also published a separate notice on July 30, stating that threat actors are targeting water entities of all sizes. The FBI's July 30 notice confirms reports from facility operators in seven states, though the specific states were not named in that announcement. However, multiple media reports have identified Minnesota and Michigan as states that have experienced a significant number of these attacks. Specifically, ABC News reported that on July 26 and 27, Minnesota IT Services (MNIT) indicated that over 30 water systems in Minnesota were targeted. The FBI's investigation into these incidents is ongoing, with agencies working to identify the perpetrators and mitigate further risks to critical infrastructure. The attacks typically involve gaining unauthorized remote access to internet-facing devices within water treatment and distribution facilities. Once access is achieved, the cyber actors reportedly change IP addresses and passwords, leading to a loss of monitoring and control functionalities for the facility operators. This disruption can directly impact the ability to manage water pressure, detect leaks, and ensure the continuous operation of the water supply. The targeting of water systems represents a significant threat to public health and safety, as disruptions can affect access to clean drinking water for entire communities and potentially lead to contamination. The FBI and CISA are collaborating with state and local authorities, as well as water utilities, to enhance cybersecurity measures and provide guidance on protecting these vital systems from future attacks. The ongoing nature of these cyber threats underscores the vulnerability of critical infrastructure to sophisticated cyber adversaries and the need for continuous vigilance and investment in robust cybersecurity defenses.