US government says Iran-linked hackers are disrupting American water and energy providers
US agencies say Iranian state-backed hackers are actively targeting industrial control systems at American water and energy providers, seeking to cause disruption during the ongoing conflict involving Iran, the US and Israel. The warning matters because these systems operate critical services, and compromised controllers could lead to outages or unsafe conditions without operators being alerted.
The FBI, NSA, Department of Energy and CISA said the attackers are targeting internet-connected programmable logic controllers, including equipment from Rockwell, Schneider Electric and Siemens. In one incident, hackers reportedly altered programming that managed critical shutdowns and alarms, while agencies warned that potentially any internet-exposed industrial control system could be vulnerable. The activity follows other Iran-linked cyberattacks since February, including a claimed breach of California water provider Cal Water, although the company said it found no operational-network intrusion.
In short
- Iran-linked hackers are targeting US water and energy control systems.
- Altered controllers could create unsafe conditions and outages.
- Agencies urge owners to secure internet-exposed industrial equipment.
Steelman: both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
The warning comes from multiple credible US intelligence and security agencies with access to classified evidence and technical expertise. Iranian state-backed cyber activity is documented, and targeting industrial control systems during escalating geopolitical conflict represents a genuine threat to critical infrastructure. These systems are known to be vulnerable when internet-connected, and transparent disclosure allows operators to strengthen their defences proactively.
The case against
The US government has a documented history of overstating foreign cyber threats to justify security expenditure and expanded surveillance programmes. The evidence presented contains inconsistencies—notably Cal Water's denial that its operational systems were breached—which appropriately prompt caution about accepting the full characterisation at face value. A meaningful distinction exists between reconnaissance activities and actual operational disruption, and the publicly available evidence does not clearly establish which is occurring.
Explained simply
American water and energy companies rely on computer systems called industrial control systems to manage their operations safely and reliably. US government agencies have warned that Iranian-backed hackers are attempting to break into and disrupt these systems, which could potentially cause water or power outages and put public safety at risk if the systems stop working properly without alerting staff.
The attacks are occurring during ongoing tensions between Iran, the United States and Israel. The US Federal Bureau of Investigation, National Security Agency, Department of Energy and the Cybersecurity and Infrastructure Security Agency all issued the warning together, indicating they view this as a significant threat.
The Iranian-backed hackers are targeting specific industrial equipment made by companies such as Rockwell, Schneider Electric and Siemens that manage essential functions at utilities. In at least one confirmed incident, attackers changed the computer programming that manages critical shutdowns and alarms, whilst agencies cautioned that any such system exposed to the internet could be vulnerable.
Americas Cybersecurity Government Middle East Politics Software Technology World