Cyberattacks Targeting Water Systems Reported in At Least Seven U.S. States

At least seven U.S. states have reported cyberattacks on their water systems, prompting warnings from the Cybersecurity & Infrastructure Security Agency (CISA). CISA noted a significant increase in threat actors targeting programmable logic controllers (PLCs) in the Water and Wastewater Systems sector, leading to incidents like modified passwords, disconnected PLCs, boil-water notices, and sustained manual operations. While no water supply has been deemed unsafe to drink, officials are investigating potential links to Iranian hackers, who have previously targeted U.S. water systems.