Cyberattacks have affected water supply systems in at least seven U.S. states
Cyberattacks have affected water supply and wastewater treatment facilities in at least seven U.S. states. In late July, Minnesota officials reported that coordinated attacks had affected water treatment facilities in more than 30 communities across the state. The FBI stated that in some cases, the incidents disrupted water supply systems.
According to TechCrunch, breaches of water infrastructure facilities were also reported in Arkansas, Georgia, New Jersey, and Michigan. The FBI noted that some of the attacks caused a drop in water pressure in the pipes. This could potentially have allowed untreated groundwater to enter the pipes and cause flooding.
In Braighem, Minnesota, a water treatment plant was shut down for several hours, and approximately 1,700 residents were asked to conserve water. In Maple Plain, also in Minnesota, a state of emergency was briefly declared. In one of the counties near Atlanta, local authorities temporarily advised residents to boil their water before use as a precautionary measure.
For more breaking news, follow the UA.News Telegram channel.
U.S. authorities have not yet officially identified those responsible for the series of attacks. Meanwhile, the first incidents in Minnesota occurred a few days after the U.S. Cybersecurity and Infrastructure Security Agency (CISA) that Iranian hackers were targeting internet-connected devices in water systems and the energy sector. WaterISAC, a nonprofit organization that disseminates cybersecurity information in the water sector, informed its members that the recent attacks are consistent with the campaign CISA had warned about.
As The Washington Post reported, citing sources, U.S. intelligence agencies are confident of Iran’s involvement, specifically that of the Islamic Revolutionary Guard Corps. There has been no public attribution yet. Following the initial reports, U.S. President Donald Trump stated that he does not consider this to be an Iranian cyberattack.
Earlier this month, Forescout discovered more than 2,800 controllers in U.S. water supply systems accessible via the internet. The mere fact of such access does not mean that attackers can take control of a facility; however, in some recent cases, attacks have had physical consequences for the operation of infrastructure.
