Key facts
- Over 30 water systems in Minnesota reported a coordinated cyber-attack.
- The FBI has warned that cyber-attacks affecting water operations have been reported in seven US states.
- US Cybersecurity and Infrastructure Security Agency (Cisa) is reportedly investigating a possible Iranian link.
- Cyber-experts suggest Iran is a likely perpetrator due to current geopolitical conflicts.
- The main threat identified is the degradation of public confidence in water security.
- Experts recommend upgrading security for water systems and disconnecting vulnerable ones from the internet.
The US is investigating a potential link between recent cyber-attacks on water systems in seven states and Iran. The FBI issued a warning after over 30 water systems in Minnesota reported a coordinated cyber-attack, with some operations reportedly degraded. US media reports indicate that Cisa is probing a possible Iranian connection.
Cyber-experts suggest that Iran is a likely perpetrator, citing the current geopolitical climate and Iran's history of cyber activities. Morgan Wright, a former US state department anti-terror adviser, noted that such attacks are often attributed to Iran or North Korea, and given the current conflict, Iran becomes a prime suspect. Investigators are also considering whether the hackers posed as Iranian to sow further discord. Jake Braun, former acting White House Deputy National Cyber Director, suggested that the Trump administration might be hesitant to admit an Iranian infiltration due to its own information warfare efforts.
President Donald Trump, while not directly blaming Iran, attributed the Minnesota hack to "grossly incompetent" state officials. Governor Tim Walz responded by stating Trump was aware of the responsible parties and that other states were also affected. Iran has not commented on the incidents but has a history of denying involvement in cyber-attacks, including those targeting water systems, presidential campaigns, and other critical infrastructure.
Experts confirm Iran has a documented history of such activities, often using groups located outside the country to maintain plausible deniability. The group Handala, previously accused of accessing personal details and emails, has been linked to cyber-attacks on US water facilities in response to US actions. Notable past incidents linked to Iran include disrupting a hacking operation targeting a medical firm, alleged hacking into US presidential campaigns, and attacks on water and wastewater systems affiliated with the IRGC.
While the immediate threat is seen as degrading public confidence in water security, experts caution that Iranian hackers could potentially endanger US water supplies in the future through malicious distribution of chemicals or damage to equipment. Cisa and the EPA have identified cyber-attacks as a serious concern for water utilities, which manage a vast network of drinking water and wastewater facilities. Experts emphasize the need to upgrade security for these systems, many of which rely on older infrastructure and are vulnerable to attack. Recommendations include immediately removing vulnerable systems from the internet and resetting passwords.