What we know about the alleged Iranian hacks on U.S. water utilities
A series of cyberattacks has reportedly affected water utilities across the United States since late July, raising concerns about the security of critical infrastructure. Although the US government has not publicly attributed the incidents, Iranian state-backed hackers are the leading suspects, and the scale of the campaign may represent an escalation beyond previous opportunistic attacks.
Minnesota said treatment plants in more than 30 communities were targeted on 28 July, while the FBI later reported incidents involving water and wastewater utilities in at least seven states, sometimes degrading operations; reported cases have also emerged in Arkansas, Georgia, New Jersey and Michigan. The US has more than 150,000 water systems, many run by smaller local operators that may lack cybersecurity resources, while intelligence agencies reportedly believe Iran’s Islamic Revolutionary Guard Corps is responsible.
- Water utilities in several US states have suffered coordinated cyberattacks.
- Iran is the main suspect, but no public attribution has been made.
- Smaller water operators may be particularly exposed to cyber risks.
New here? Start with this
Water utilities collect, treat and distribute drinking water, and process wastewater before it is returned to the environment. In the United States, most are run locally, ranging from large city services to small systems serving individual towns or rural areas.
Cyberattacks on these systems can involve attempts to disrupt the computers that monitor equipment, control treatment processes or manage records. Smaller operators can be harder to protect because they may have limited specialist staff and older technology.
Iran and the United States have long been rivals, and both have accused each other of carrying out cyber operations. Iran’s Islamic Revolutionary Guard Corps is a powerful military organisation which Western governments have previously linked to hacking activity, although public attribution of particular incidents can take time.
Americas Cybersecurity Government Middle East Politics Technology World