Municipal water facilities across the United States have become the targets of coordinated cyberattacks, leading to significant operational disruptions in at least seven states. Last week, Minnesota officials confirmed that over 30 local water systems were breached between July 26 and July 27, while Michigan reported similar incidents affecting nine of its facilities. These attacks forced several operators to pivot to manual control systems to maintain service stability and prevent potential contamination or infrastructure damage.

According to TIME, federal authorities, including the FBI and the Environmental Protection Agency (EPA), have issued joint warnings highlighting how hackers are exploiting internet-connected controls. By gaining remote access and altering administrator credentials, unauthorized actors have triggered operational issues such as pressure loss and flooding, creating risks that could allow untreated groundwater to infiltrate piping networks. While investigators are exploring potential links to recent warnings regarding Iranian-backed threats to critical infrastructure, no definitive attribution has been established.

The EPA has emphasized that responsibility for securing these utilities primarily rests with local operators, noting that many systems remain vulnerable due to outdated software and inadequate network security practices. In response to the crisis, the Cybersecurity and Infrastructure Security Agency (CISA) has urged utility managers to audit external connections, strengthen password protocols, and disconnect critical control systems from the public internet. Despite federal guidance, the decentralized nature of these facilities continues to present a complex security challenge as municipalities struggle to coordinate necessary cybersecurity upgrades.