Iranian hackers are suspected to be behind a cyberattack campaign that has targeted water systems in at least seven U.S. states, according to a cybersecurity expert. The attacks, which reached over 30 systems in Minnesota alone on July 26 and 27, have disrupted operations, including causing water pressure loss and flooding. The FBI confirmed that water utilities across at least seven states have reported similar incidents, though the other affected states have not been publicly identified.
Annie Fixler, director of the cyber and technology innovation center at the Foundation for Defense of Democracies, stated that the "working assumption is that it is Iranian threat actors." She cited the nature of the targets and the methods used as consistent with Iran's known cyber activities.
However, Fixler noted that it is "surprising" that no group has publicly claimed responsibility for the attacks. "Iranian hackers tend to claim responsibility for stuff because of that ‘perception-hacking’ component, because they want to let everyone know they did it and that they’re really scary and big and bad," she explained.
President Donald Trump has disputed the attribution, suggesting instead that Minnesota's "corrupt governor" was responsible due to alleged incompetence. "Iran should be so lucky. Iran’s got bigger problems than worrying about Minnesota," Trump said during a cabinet meeting.
Fixler elaborated that the hackers targeted programmable logic controllers (PLCs), which directly manage industrial equipment like pumps and valves. Gaining direct access to this "operational technology" allows attackers to cause physical disruptions without necessarily navigating the broader computer network.
This incident may be connected to earlier warnings from federal agencies in April that indicated Iranian hackers were targeting U.S. energy networks, government facilities, and other critical infrastructure, including water and wastewater systems. Fixler believes the situation is evolving and that the number of affected states is likely higher than currently reported.
While officials have reassured the public that the attacks do not pose a direct danger to water safety or indicate an attempt to contaminate water supplies, Fixler cautioned against overstating the threat. She suggested that exaggerating Iran's capabilities could serve the country's goals of intimidation by creating societal panic and influencing U.S. policy by making Americans believe Iran is a more significant threat than it might be. "Iran wants people to think that ‘they are 10 feet tall, they are really bad and we should be scared of them,’" Fixler said.