Water utilities in seven US states report Iran-linked cyberattacks targeting treatment plant controllers
Water utilities in at least seven US states, including Michigan and Georgia, have reported hostile cyber activity since late July targeting the industrial controllers that run treatment plants, per Bloomberg and CBS News. The FBI observed intrusion attempts against Rockwell Autom
Water and wastewater utilities in at least seven US states have reported hostile cyber activity to the FBI since July 27, according to Bloomberg and CBS News. Michigan's Department of Environment, Great Lakes, and Energy said nine water systems in the state flagged intrusion attempts, and officials in Clayton County, Georgia reported a temporary water service disruption that may be linked to the same campaign. The FBI has observed activity targeting Rockwell Automation and Allen-Bradley programmable logic controllers, the industrial equipment that physically operates treatment plants, while a separate CISA advisory warns that Schneider Electric and Siemens controllers are also being targeted. Iran-affiliated actors are the leading suspects, though the FBI has not issued a public attribution, and neither Michigan nor Georgia has published a public notification about the intrusions. The distinction that makes this campaign different from a typical data breach is the target: a stolen customer database exposes information, but a compromised programmable logic controller can directly affect whether water actually gets treated and pumped. That is why utilities are required to report this kind of intrusion to federal authorities even when no confirmed disruption has occurred, and why cybersecurity officials treat attacks on industrial control systems as a public safety issue rather than a purely digital one.