Key facts
- Federal officials are warning of a surge in cyberattacks targeting US water utilities.
- At least seven states have reported incidents to the FBI.
- The incidents began occurring in late July.
- The attacks are attributed to malicious cyber actors.
- Attackers have gained unauthorized access to systems.
- Attackers have altered system settings.
- Attackers have weakened operational control.
- Some attacks have resulted in real-world disruptions.
Federal officials are issuing urgent warnings regarding a significant increase in cyberattacks targeting water utilities across the United States. Since late July, at least seven states have reported incidents to the FBI, indicating a widespread and coordinated effort by malicious cyber actors. These attacks involve gaining unauthorized access to the operational technology systems that control water treatment and distribution. Once inside, the actors have been observed altering system settings and weakening the operational control that utilities rely on to function safely and effectively. Some of these intrusions have resulted in tangible, real-world disruptions to water services, raising serious concerns about the security of critical U.S. infrastructure. The nature of the attacks suggests a deliberate attempt to compromise the integrity and reliability of these essential services. Federal agencies are actively investigating these incidents and working with affected utilities to bolster their defenses against future threats.