U.S. investigating if Iran was behind cyberattack on water systems in 7 states, including Minnesota and Michigan
The U.S. is investigating a cyberattack on water systems in at least seven states, including Minnesota and Michigan, with officials probing whether Iranian hackers are behind the attack.
Intelligence analysis by Llama

The U.S. is investigating a cyberattack on water systems in at least seven states, with officials probing whether Iranian hackers are behind the attack. The attack affected technology at water systems in Minnesota and Michigan, forcing some utilities to switch to manual operations.
Imagine a big computer system that controls the water in your city. Someone hacked into that system and made it hard for the city to control the water. This is like a big game of 'Simon Says' for computers, and it's not good for the city or its people.
Analysis
A Growing Threat of Cyberattacks on Critical Infrastructure
The recent cyberattack on water systems in at least seven states, including Minnesota and Michigan, highlights the growing threat of cyberattacks on critical infrastructure. The attack, which affected technology at water systems in Minnesota and Michigan, forcing some utilities to switch to manual operations, is a stark reminder of the need for increased security measures to protect against such attacks.
The FBI, Environmental Protection Agency, and CISA all warned that attackers are targeting internet-exposed industrial controllers used by water and wastewater utilities. In at least some cases, federal authorities reported loss of monitoring and control functionality at critical infrastructure sites, leading to pressure loss and flooding. The attack on water systems in Minnesota and Michigan is a prime example of the growing threat of cyberattacks on critical infrastructure.
Iran-Linked Hackers Target U.S. Water Utilities
Iran-linked hackers have previously targeted U.S. water utilities. Federal agencies confirmed previously that actors affiliated with Iran's Islamic Revolutionary Guard Corps used a similar playbook, accessing multiple water and wastewater facilities in 2023 by exploiting internet-connected controllers that retained their default passwords. Officials warned of water systems being targeted.
The Investigation Continues
The investigation into the cyberattack on water systems in at least seven states, including Minnesota and Michigan, is ongoing. Investigators are probing to determine whether the activity is the work of Iranian hackers, according to U.S. officials and sources familiar with the incident. Sources cautioned that since they had not definitively attributed the attack, their assessment could change as additional technical evidence is collected.
Key points
- The U.S. is investigating a cyberattack on water systems in at least seven states, including Minnesota and Michigan.
- The attack affected technology at water systems in Minnesota and Michigan, forcing some utilities to switch to manual operations.
- Iran-linked hackers have previously targeted U.S. water utilities.
- The investigation into the cyberattack is ongoing, with officials probing whether Iranian hackers are behind the attack.
If the investigation determines that the cyberattack was not carried out by Iranian hackers, it could be a positive development for the U.S.-Iran relations. Additionally, the increased security measures implemented by water utilities to protect against cyberattacks could lead to a safer and more secure water supply for the public.
If the investigation determines that the cyberattack was carried out by Iranian hackers, it could lead to increased tensions between the U.S. and Iran. Additionally, the attack could have long-term consequences for the water supply and infrastructure of the affected states.
