U.S. water systems in several states have been the target of cyberattacks in recent weeks, prompting federal agencies to investigate the incidents and assess the security of the nation's critical infrastructure. The attacks have raised concerns about potential foreign involvement, with federal officials noting the ongoing threat posed by Iranian cyber actors.
Assistant Director Brett Leatherman of the FBI’s Cyber Division stated that "Iranian cyber actors continue to target U.S. critical infrastructure." He emphasized the FBI's commitment to identifying and disrupting those responsible and highlighted the importance of timely, actionable intelligence sharing in combating such threats. The FBI is working to impose costs on those found to be responsible for the attacks.
Experts suggest that these cyber incidents could be a form of retaliation. Trita Parsi, Executive Vice President of the Quincy Institute for Responsible Statecraft, noted that Iran is a capable cyber power, with capabilities on par with or below those of the U.S., China, Russia, and Israel. Parsi indicated that Iran has a demonstrated history of targeting industrial control systems, water facilities, and energy infrastructure. He added that it would be reasonable for Iran to attempt cyberattacks as a "warning" in response to U.S. strikes, suggesting that Iran is capable of fulfilling such threats.
The wave of attacks underscores the vulnerability of U.S. infrastructure to sophisticated cyber threats. The incidents are under investigation by multiple federal agencies, including the FBI, which is focused on understanding the scope of the attacks and preventing future disruptions. The nature of these attacks suggests a coordinated effort, raising national security concerns about the potential for broader impacts on essential services.