FBI: Hackers Targeted Water Utility Providers
Page 1 of 1 [ 1 post ]
02 Aug 2026, 7:23 pm
Quote:
Hackers have been targeting internet-exposed computers known as programmable logic controllers, causing 'loss of pressure and flooding,' the FBI says.
Michael Kan
Michael Kan
Principal Reporter
OUR EXPERT
When he's not battling bugs and robots in Helldivers 2, Michael is reporting on AI, satellites, cybersecurity, PCs, and tech policy.
Edited By:
Chloe Albanesius
July 31, 2026
Add as a preferred source on Google
water treatment east bay
(Credit: Justin Sullivan/Getty Images)
The FBI indicates that a growing number of water systems in the US have been fending off cyberattacks aimed at disrupting their operations.
The incidents began on Monday and involved water and wastewater utility companies in at least seven US states. “Some of that activity degraded water operations,” the agency said in a Thursday alert with the Environmental Protection Agency.
The alert arrives after Minnesota reported a “coordinated cyberattack” targeting more than 30 community water systems on Sunday into Monday. The FBI’s advisory shows the hacking attempts have been much wider in scope.
PCMag logo
You May Also Like
The agency warns that hackers have been exploiting programmable logic controllers (PLCs), or specialized computers used to control industrial systems, specifically the MicroLogix 1100 and 1400 series from Rockwell Automation/Allen-Bradley. Hackers are targeting internet-exposed PLCs and then changing device configurations, such as the IP addresses and passwords. This can block a utility provider from monitoring and controlling its water system.
“Operational effects reported to the FBI have included loss of pressure and flooding. Pressure loss in water systems could potentially allow untreated groundwater to seep into pipes,” the alert adds. In response, the FBI and EPA are urging affected companies to disconnect their PLCs from the public-facing internet, implement firewall rules, and ensure their IT systems are secured with complex, unique passwords.
On Thursday, Minnesota officials said they're continuing to investigate the breach of its water systems, which also involved hackers tampering with PLCs and computer screen operators. "State agencies are working directly with impacted water systems to contain the activity, assess potential impacts, restore normal operations, and reduce the risk of further disruption."
Recommended by Our Editors
Chrome browser
Google Tests Doubling Chrome's Security Patch Cadence to Outpace Hackers
Person securing smartphone with password and fingerprint biometrics for data protection.
Your Phone Is Watching You After Calls (And 5 Other Terrifying Cyber Threats This Week)
Screenshot from Meccha Chameleon
Hackers Target Yet Another Steam Game With Malware. Here's How They Did It
US officials reportedly suspect that Iran was behind the attack in Minnesota, but for now, the state says it “has not attributed the activity to a specific actor.” In April, the FBI and NSA warned that Iranian hackers were working to exploit vulnerable PLCs from Rockwell Automation.
The water system intrusions occur amid renewed military strikes between the US and Iran. Other hacks earlier this year, including an intrusion into the personal Gmail account of FBI Director Kash Patel, have also been blamed on Iran.
Michael Kan
Michael Kan
Principal Reporter
OUR EXPERT
When he's not battling bugs and robots in Helldivers 2, Michael is reporting on AI, satellites, cybersecurity, PCs, and tech policy.
Edited By:
Chloe Albanesius
July 31, 2026
Add as a preferred source on Google
water treatment east bay
(Credit: Justin Sullivan/Getty Images)
The FBI indicates that a growing number of water systems in the US have been fending off cyberattacks aimed at disrupting their operations.
The incidents began on Monday and involved water and wastewater utility companies in at least seven US states. “Some of that activity degraded water operations,” the agency said in a Thursday alert with the Environmental Protection Agency.
The alert arrives after Minnesota reported a “coordinated cyberattack” targeting more than 30 community water systems on Sunday into Monday. The FBI’s advisory shows the hacking attempts have been much wider in scope.
PCMag logo
You May Also Like
The agency warns that hackers have been exploiting programmable logic controllers (PLCs), or specialized computers used to control industrial systems, specifically the MicroLogix 1100 and 1400 series from Rockwell Automation/Allen-Bradley. Hackers are targeting internet-exposed PLCs and then changing device configurations, such as the IP addresses and passwords. This can block a utility provider from monitoring and controlling its water system.
“Operational effects reported to the FBI have included loss of pressure and flooding. Pressure loss in water systems could potentially allow untreated groundwater to seep into pipes,” the alert adds. In response, the FBI and EPA are urging affected companies to disconnect their PLCs from the public-facing internet, implement firewall rules, and ensure their IT systems are secured with complex, unique passwords.
On Thursday, Minnesota officials said they're continuing to investigate the breach of its water systems, which also involved hackers tampering with PLCs and computer screen operators. "State agencies are working directly with impacted water systems to contain the activity, assess potential impacts, restore normal operations, and reduce the risk of further disruption."
Recommended by Our Editors
Chrome browser
Google Tests Doubling Chrome's Security Patch Cadence to Outpace Hackers
Person securing smartphone with password and fingerprint biometrics for data protection.
Your Phone Is Watching You After Calls (And 5 Other Terrifying Cyber Threats This Week)
Screenshot from Meccha Chameleon
Hackers Target Yet Another Steam Game With Malware. Here's How They Did It
US officials reportedly suspect that Iran was behind the attack in Minnesota, but for now, the state says it “has not attributed the activity to a specific actor.” In April, the FBI and NSA warned that Iranian hackers were working to exploit vulnerable PLCs from Rockwell Automation.
The water system intrusions occur amid renewed military strikes between the US and Iran. Other hacks earlier this year, including an intrusion into the personal Gmail account of FBI Director Kash Patel, have also been blamed on Iran.
https://www.pcmag.com/news/fbi-hackers- ... t-7-states?
_________________
“Laughter is an instant vacation.”
― Milton Berle
