Cyberattacks on Water Systems in 12 US States
Although there is no official confirmation, experts and investigators link coordinated hacker attacks to Tehran, targeting dozens of water systems across the US.
Although there is no official confirmation, experts and investigators link coordinated hacker attacks to Tehran, targeting dozens of water systems across the US.
Water systems in as many as 12 US states were targeted in cyberattacks, ABC News reported on Wednesday, August 5, 2026. Although there were no major disruptions to water supply or treatment, the FBI immediately responded by recommending that utilities heighten precautions, including disconnecting systems from the internet where possible and switching to manual operation.
Iran is named as the main suspect in these attacks, but official confirmation has not yet arrived. Sources close to the investigation say Iranian involvement is being probed, while Tehran has not yet commented on the latest allegations.
The wave of attacks began last week when Minnesota announced that more than 30 of its water systems had been targeted in a coordinated hacker attack. Just days later, the FBI warned that similar incidents had been recorded in six more states, indicating a widespread operation. According to Tportal, US authorities are investigating attacks in at least seven states, while TASS, citing ABC News, puts the number of affected states at 12.
Police in Michigan, one of the hardest-hit states, said they are monitoring the situation and coordinating with federal authorities. Local operators managed to resolve the issues, and no incidents threatening public health were reported.
Morgan Wright, a former State Department counterterrorism adviser, told the BBC that such attacks are most often linked to North Korea or Iran.
"Given that the United States is currently in conflict with Iran, it is logical that this country would be among the main suspects. It has both the capability and the motive,"Wright said.
Despite the suspicions, US investigators are also considering the scenario that the attackers were posing as Iranian hackers to escalate tensions in the current US-Iran conflict. Jake Braun, former deputy director for cybersecurity at the White House, believes the Trump administration may not publicly confirm Iranian responsibility even if it is proven. "What is being attacked is public confidence in the state's ability to provide basic services," Braun warned, stressing that this is the greatest danger at the moment.
At a cabinet meeting, Trump blamed Minnesota authorities and Governor Tim Walz for the attacks, calling them "utterly incompetent." Walz retorted that the president "knows exactly who is behind the attacks" and that other states were also affected.
The BBC's investigative unit, BBC Verify, reports that most of this year's attacks on US and Israeli targets were carried out by the hacker group Handala. The US Department of Justice states that Handala operates on behalf of Iran's Ministry of Intelligence and Security (MOIS).
The group claimed responsibility for the intrusion into a California water system in mid-June 2026, saying it was retaliation for a US strike on Iranian water infrastructure.
The US Cybersecurity and Infrastructure Security Agency (CISA) and the Environmental Protection Agency (EPA) had previously warned that cyberattacks pose a serious threat. There are approximately 152,000 public drinking water systems and more than 16,000 wastewater treatment plants in the US, and much of this infrastructure is aging and susceptible to such threats.
Experts point out that stronger attacks in the future could lead to more severe consequences, including water supply interruptions, incorrect chemical dosing, or equipment damage. CISA recommends a range of protective measures, including removing sensitive systems from the internet and urgently changing passwords.
