Georgia and Michigan have become the latest US states to report cyberattacks on their water systems, joining Minnesota as investigators examine incidents affecting at least seven states in total. The FBI is probing the campaign, with Iran-backed hackers considered the leading suspects, though the bureau has not made a formal attribution; the attacks matter because they highlight persistent vulnerabilities in critical infrastructure, particularly the industrial control systems that keep water utilities running safely.

Nine Michigan water systems reported hostile activity to the state's environment department, while Georgia confirmed limited damage to ABC News; neither state reported operational disruption or issued public notifications. The FBI advisory noted incidents since 27 July have degraded some water operations and observed attacks specifically on Rockwell Automation/Allen-Bradley controllers, while a separate CISA advisory flagged Schneider Electric and Siemens equipment as also being targeted by Iran-affiliated actors. Minnesota, the first state to confirm it was hit, saw more than 30 community water systems targeted on 26-27 July, and researchers at Tenable linked the activity to the IRGC-affiliated CyberAv3ngers group. President Trump publicly rejected the Iran theory without evidence, instead blaming Minnesota's governor, while Governor Tim Walz maintained Iran was responsible and pointed to federal funding cuts as leaving water facilities more exposed.