Iran-Linked Hackers Strike U.S. Water Systems in Over a Dozen States

A sprawling cyberattack campaign targeting American water systems has been uncovered across more than a dozen states, with mounting evidence pointing directly to Iran. Federal alerts issued jointly by the FBI, the EPA, and the Cybersecurity and Infrastructure Security Agency confirm that incidents have been unfolding since late July 2026, hitting at least seven to twelve states nationwide. Minnesota bore the brunt of the assault, with more than thirty separate water systems compromised, while Michigan also reported significant intrusions. Investigators say the attacks involved unauthorized access to industrial control systems, triggering real-world disruptions including sudden drops in water pressure and boil-water notices for affected communities, though officials stress that no major public health impacts have been confirmed so far.

Suspicion has quickly centered on Iran-linked hacking collectives, most notably the group known as CyberAv3ngers, which has a documented history of targeting American water infrastructure in prior campaigns. The pattern fits a disturbing and increasingly familiar playbook: as geopolitical tensions with Tehran escalate, Iranian-backed actors appear to be turning to America's critical infrastructure as a battleground, probing for weaknesses in systems that millions of ordinary citizens rely on every single day. Federal advisories are now urging water utilities across the country to immediately lock down internet-facing devices and control systems that may have been left exposed.

The timing is impossible to ignore. As Washington pursues diplomacy and military deterrence on multiple fronts with Tehran, this latest cyber offensive is a stark reminder that Iran's hostility toward the United States is not confined to the battlefield or the negotiating table — it is being waged quietly, and dangerously, inside the digital backbone of American communities. Officials say the response from federal agencies has been swift, but the incident underscores the urgent need for utilities nationwide to harden their defenses against an adversary that has shown it is willing to reach directly into American homes.