Cyber intrusions targeting water and wastewater utilities have been reported in at least a dozen states, according to multiple sources. Iran is considered the prime suspect in these attacks, though its involvement has not been officially confirmed. The intrusions can disrupt operations by altering passwords or disabling alarms.
So far, there have been no widespread disruptions to water supplies or wastewater treatment. The FBI is advising utilities to disconnect systems from the internet where possible, utilize systems with breakers, and become familiar with manual control reversion in case automated systems are compromised.
In Michigan, one of the affected states, state police are monitoring the situation and collaborating with federal partners. The Michigan State Police, in coordination with the Department of Environment, Great Lakes, and Energy, are communicating with municipal water systems across the state to encourage system security and adherence to cybersecurity guidance. According to information from the Department of Environment, Great Lakes, and Energy, all systems continued to operate safely, with local operators addressing issues and no known public health concerns arising from the incidents. The FBI is leading the investigation into the matter.