Water Systems in Multiple States Targeted by Cyberattacks

2026-08-06

The BareStory

Water utilities in at least 12 U.S. states, including New Jersey, Georgia, Minnesota, Michigan, and South Dakota, have recently been targeted by cyberattacks. According to officials, the incidents have forced several facilities to temporarily transition to manual operations after losing remote-control and monitoring capabilities. Drinking water has remained safe, and no illnesses or widespread service disruptions have been reported.

In New Jersey, two municipal water systems temporarily shifted to manual operations last week to secure their systems. In Georgia, an intrusion at the Clayton County Water Authority last month caused a brief drop in water pressure and a temporary boil-water advisory before operations were restored. In Minnesota, more than 30 community water systems were affected by the cyber activity.

State officials and federal partners, including the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA), are currently investigating the incidents. Sources stated that investigators suspect Iranian-backed actors may be responsible, noting that the tactics resemble a 2023 campaign by a group linked to the Iranian Revolutionary Guard. However, federal authorities have not made a formal attribution, and officials are also assessing whether another state actor could be mimicking these tactics.

The intrusions exploited vulnerabilities in internet-exposed control systems and widely used utility software. On July 30, the FBI, CISA, and the Environmental Protection Agency (EPA) issued a joint warning advising water utilities to secure their networks by disconnecting operational programs from the internet, updating default passwords, and strengthening firewalls.

Left Perspective

Shield the Domestic Commons
Defuse the Escalation Spiral
Safeguard the Vital Threshold

Right Perspective

Project Decisive Strategic Deterrence
Fortify the Sovereign Line
Confront the Gray-Zone Threat

Left Perspective

• Shield the Domestic Commons Prioritizing the security of civilian populations requires addressing the systemic domestic vulnerabilities that allow critical infrastructure intrusions to occur in the first place. The reality that water utilities in at least 12 states, including Minnesota and Georgia, were compromised via internet-exposed control systems reveals a failure in basic public oversight and defensive standards. Rather than focusing on external escalation, the immediate priority must be domestic protective reform—such as enforcing the joint July 30 guidelines from the FBI, CISA, and the EPA to disconnect operational networks from the internet and update default passwords—to secure vital public resources.

• Defuse the Escalation Spiral International law and diplomatic stability demand high standards of proof before assigning blame for hostile acts, particularly when cyber warfare tactics can be easily spoofed. While investigators suspect Iranian-backed actors are responsible for these intrusions, federal authorities have not made a formal attribution, noting that another state actor could be mimicking the 2023 Revolutionary Guard tactics. Rushing to confront external adversaries without definitive proof risks triggering an escalatory geopolitical cycle, making a cautious, multi-agency investigation by CISA and the FBI the only responsible path to avoid unnecessary international conflict.

• Safeguard the Vital Threshold This camp fears that cyber warfare targeting civilian municipal services threatens to normalize the disruption of basic human survival needs as a tool of geopolitical leverage. Although drinking water remained safe during these incidents, the temporary boil-water advisory in Clayton County, Georgia, and the shift to manual operations in New Jersey highlight how easily civilian welfare can be compromised in these disputes. Failing to establish international norms that treat public drinking water as strictly off-limits in cyber conflicts leaves vulnerable local communities to bear the physical and psychological costs of global power struggles.

Right Perspective

• Project Decisive Strategic Deterrence National sovereignty and security depend on projecting decisive strength to deter hostile foreign regimes from violating domestic critical infrastructure. The suspected involvement of Iranian-backed actors utilizing tactics resembling a 2023 campaign by a group linked to the Iranian Revolutionary Guard demonstrates that passive domestic defense alone is insufficient to halt state-sponsored aggression. Preventing future gray-zone operations against American utility networks requires proving to foreign adversaries that targeting vital domestic infrastructure will result in severe, asymmetric strategic costs.

• Fortify the Sovereign Line Preserving public order and national continuity requires maintaining absolute control over vital infrastructure and ensuring quick operational redundancy when under threat. The manual transition of water facilities in states like South Dakota, Michigan, and New Jersey demonstrates that swift, localized operational continuity can successfully mitigate immediate hostile actions. From this perspective, the ability of state and federal partners to prevent widespread service disruptions is a testament to the necessity of robust emergency protocols and the resilient, decentralized nature of American utility systems.

• Confront the Gray-Zone Threat This camp fears that failing to establish clear, red-line consequences for these cyber intrusions invites bolder and more destructive foreign aggression against the homeland. With over 30 community water systems affected in Minnesota alone, hostile foreign powers are actively mapping and testing the vulnerabilities of the nation's critical networks. Allowing state-sponsored actors to target domestic utilities with impunity risks normalizing a form of low-intensity conflict that slowly erodes public trust, national security, and the stability of the state.

How it may affect me

As a U.S. reader:

• You may experience temporary local disruptions to your water service, such as brief drops in water pressure or short-term boil-water advisories, as utilities respond to cyber threats.

• Your local water utility may temporarily shift to manual operations to secure its network, though drinking water safety has been successfully maintained during recent incidents.

• You may see local water systems implement stricter security protocols, such as updating default passwords and disconnecting operational systems from the internet to close digital vulnerabilities.

• You could face a long-term risk of more frequent or severe service disruptions if domestic infrastructure defenses are not modernized or if foreign adversaries continue testing utility vulnerabilities.

Water Systems in Multiple States Targeted by Cyberattacks

The BareStory

Left Perspective

Right Perspective

How it may affect me

Read the story at