The U.S. government’s cyber defense agency has issued a warning about a surge in hackers targeting water and wastewater systems, urging operators to remove vulnerable technology from the internet. The alert follows coordinated cyberattacks on more than 30 community water systems in Minnesota on July 26 and 27, which disrupted operations in some areas for hours. The FBI is investigating potential Iranian involvement, though no official attribution has been made. Investigators are examining whether the attacks were carried out by Tehran-backed hackers or if the perpetrators sought to frame Iran amid escalating U.S.-Iran tensions.
Immediate Action & Core Facts
The Cybersecurity and Infrastructure Security Agency (CISA) warned on July 30 that hackers are increasingly targeting water systems, including those in Minnesota. The attacks disrupted operations in at least seven states, with some systems forced to switch to manual controls. The FBI and CISA have advised water utilities to remove exposed programmable logic controllers (PLCs) from the internet to prevent further breaches.
Deeper Dive & Context
Investigation Details
The FBI is probing whether Iranian hackers, possibly linked to the CyberAv3ngers group, were behind the attacks. The group has been accused of previous cyberattacks on U.S. infrastructure, including medical services company Stryker and the Los Angeles County Metropolitan Transportation Authority. Minnesota officials confirmed that the attacks affected remote monitoring and control systems but did not compromise water safety.
Official Responses
The White House referred questions to the FBI, which has not yet publicly identified the attackers. CISA’s acting director, Nick Anderson, emphasized the need for critical infrastructure to secure exposed systems. The FBI’s Cyber Division stated that Iranian hackers continue to target U.S. infrastructure, though no definitive link to the Minnesota attacks has been established.
Broader Implications
The attacks come amid heightened U.S.-Iran tensions, including recent missile exchanges and cyber threats. Experts warn that water systems and other critical infrastructure remain vulnerable to cyberattacks, particularly if connected to the internet. The FBI and CISA have urged operators to prioritize cybersecurity measures to prevent future disruptions.