NEW Jersey and Alabama have recently confirmed that their water and wastewater facilities were targeted in a hacking campaign initiated in late July, which has impacted at least 12 states overall. The cyberattacks primarily targeted operational technology (OT) systems, with limited disruptions reported. Minnesota was the first to report attacks on over 30 water systems, followed by Michigan, South Dakota, and Georgia. Reports indicate that while there were attempts to disrupt services, drinking water remained safe.
The Federal Bureau of Investigation (FBI) has identified Iranian hackers as a significant threat, targeting devices from companies like Rockwell Automation. The Cybersecurity and Infrastructure Security Agency (CISA) has urged water utilities to strengthen their cybersecurity measures in response to the attacks.