Breaches and incidentsBriefReported by a reputable outlet, citing the company
US water utilities: remote takeover of controls in at least 12 states
FBI, EPA and CISA warned on 30 Jul that attackers remotely accessed water and wastewater systems in at least seven states, “resulting in a loss of...
- Disclosed
What happened
- FBI, EPA and CISA warned on 30 Jul that attackers remotely accessed water and wastewater systems in at least seven states, “resulting in a loss of monitoring and control functionality”. CBS sources later said at least a dozen states; Minnesota reported 30+ systems; NYT reported at least 100 facilities (CSIS located 55). In Clayton County, Georgia, a pump station shutdown dropped pressure and triggered a boil-water advisory. Officials say drinking water stayed safe.
- Technique: remote access to internet-exposed control systems (pumps, valves, pressure). Not detailed officially.
- Attribution: CyberAv3ngers (IRGC-linked) claimed it (CSIS); federal investigators suspect Iran-backed actors; no formal US attribution.
Sources
- https://www.cbsnews.com/news/more-states-water-systems-cyberattacks-iran-backed-hackers/
- https://www.csis.org/analysis/mapping-iranian-cyberattacks-us-water-systems
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.