Water System Cyberattacks Reported in at Least 12 States
Possible cyber intrusions targeting water and wastewater utilities have been reported in at least a dozen U.S. states, sources told ABC News in early August 2026 — a campaign that remains under FBI investigation and continues to shape federal guidance to utilities. abcnews
Key facts
What happened: Cyber intrusions were reported at water and wastewater utilities across at least 12 states, ABC News reported August 4, 2026 abcnews
Suspected actor: Iran is the prime suspect, according to sources, though its involvement has not been officially confirmed abcnews
Impact: No widespread disruptions to water supplies or wastewater treatment so far abcnews
Who's investigating: The FBI is leading the investigation abcnews
What utilities should do: Disconnect systems from the internet where possible and prepare to revert to manual controls abcnews
What are the attacks actually doing?
According to sources cited by ABC News, the intrusions can blind utility operators by changing passwords or disabling alarms. That matters because operators rely on those alarms to catch problems in treatment and distribution before they affect public health. An attacker doesn't need to poison water to create risk — removing an operator's visibility is dangerous on its own. abcnews
Has drinking water been affected?
No. Sources said there have been no widespread disruptions to water supplies or wastewater treatment. In Michigan, one of the affected states, state police said all systems continued to operate safely, local operators addressed the issues, and there were no known impacts posing a public health concern. abcnewsabcnews
What is the FBI telling utilities to do?
The FBI is urging utilities to disconnect systems from the internet where possible, use systems with breakers, and become familiar with reverting to manual controls if automated systems are compromised. Michigan State Police said they are coordinating with the state's Department of Environment, Great Lakes, and Energy to reach municipal water systems and push facilities using the affected software to secure their systems. abcnewsabcnews
Why small utilities are attractive targets
Water systems are critical infrastructure — essential services whose disruption affects public safety. Many U.S. utilities are small municipal operations with limited security staff, running internet-connected industrial control systems. That combination makes them a low-cost, high-signal target for state-linked actors seeking to demonstrate reach rather than cause immediate damage.
Source: ABC News, Aug. 4, 2026. Attribution to Iran is per unnamed sources and unconfirmed officially.