Officials: the scope of cyberattacks on US water systems now includes at least seven states and may be far wider; MN was just the first to publicly report them

Michigan and Minnesota are among at least seven states coping with cyberattacks aimed at disrupting water systems nationwide.

New York Times 2026-08-02

Context & Ripple Effects

The incidents have expanded from Minnesota’s public disclosure into a multi-state water-sector event, with Michigan also named among affected states. A WaterISAC memo previously linked dozens of attacks on Minnesota utilities to Iran, while federal agencies said utilities reported flooding and other operational issues in the broader campaign.

This follows earlier federal warnings that ransomware had hit water-treatment plants in multiple states, including three reported 2021 water-plant ransomware incidents. The current cluster matters because it shifts the concern from isolated utility compromises to potentially coordinated attempts to disrupt essential operations.

First-order effects

Water and wastewater utilities in at least seven states must investigate intrusions, contain affected systems, and maintain safe operations; Minnesota and Michigan face immediate public and operational scrutiny.
Federal responders and sector-sharing groups gain a larger incident set to correlate after reports of flooding and other operational impacts at some utilities.

Second-order effects

Other water utilities are likely to reassess exposed operational technology and reporting procedures, as the known footprint makes a single-state response insufficient.
The event raises the value of rapid threat sharing among utilities and federal agencies, especially where smaller operators may lack dedicated cyber-response capacity.

Third-order effects

If disruption-focused campaigns against water utilities persist, resilience of operational technology—not just data protection—will become a more central measure of critical-infrastructure cybersecurity.
A broader pattern could push the sector toward more coordinated baseline security and incident-disclosure practices, though the present reporting does not establish what policy response will follow.

The trend: Cyber risk is increasingly being measured by an attacker’s ability to interrupt physical public services across many distributed operators, rather than by data theft alone.

Discussion

@dnvolz Dustin Volz on x
New: The known reach of cyberattacks on water systems continues to expand to include Michigan + other states and could be far wider. Officials say Iran remains top suspect despite Trump's rejection of the notion. Water remains safe, but experts are spooked https://www.nytimes.com…
@jonahdispatch Jonah Goldberg on x
I don't want to be an alarmist, but a commander in chief who wants to blame foreign cyber attacks against American assets on domestic partisans so as to avoid admitting he made a mess of things, is ... suboptimal.
Rob Greer Rob Greer on linkedin
This is a very big deal and I hope it gets more people focused on the intersection of national security and water infrastructure. …
@nothoodlum @nothoodlum on bluesky
Federal officials say a hacking campaign targeting water systems in at least seven states likely originated in Iran. — The so-called president's response: “I think Minnesota is behind it. I don't think there was an Iranian cyberattack.” Gift link. 👇 — www.nytimes.com/2026/…
@darthfos Trevor Foster on bluesky
Think about it... Bronzolini threatened to blow up Iranian desalination plants many times & Iran has claimed that the US did take out infrastructure in Bunji that disrupted their water pumps so of course their response would be to remotely screw with US water systems. [embedded …
@greggjlevine Gregg Levine on bluesky
Guys! Red alert! Minnesota is cyber-attacking at least six other states! — “I think Minnesota is behind it,” Mr. Trump said on Friday in response to a reporter's question about Iran's possible involvement, which The New York Times earlier reported. “I don't think there was a…
@justinhendrix Justin Hendrix on bluesky
“The attack has little precedent, experts said, but has long been the stuff of nightmares and sensationalized Hollywood thrillers: an apparent cyberattack by a foreign power during a time of war that could, at least in theory, jeopardize the health and safety of Americans.”
r/centrist r on reddit
Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran
r/OilPrices r on reddit
Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran - The New York Times
r/GlobalNews r on reddit
Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran
r/USNEWS r on reddit
Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran
r/milwaukee r on reddit
MKE Water Supply cybersecurity
r/water r on reddit
Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran
r/thebulwark r on reddit
Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran
r/Michigan r on reddit
Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran
r/politics r on reddit
Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran
r/neoliberal r on reddit
Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran
r/Maxcactus_TrailGuide r on reddit
Hackers targeted municipal water systems in 7 states this week, FBI says
r/PrepperIntel r on reddit
Hackers targeted municipal water systems in 7 states this week, FBI says
r/politics r on reddit
Hackers targeted municipal water systems in 7 states this week, FBI says
@tvietor08 Tommy Vietor on x
I guess Tim Walz was busy?
@tbonier Tom Bonier on x
Good thing we have very experienced and competent leadership at the FBI and they totally have not been distracted by their snipe hunt looking for voter fraud from 2020.
@karlykingsley Karly Kingsley on x
Iranian-linked hackers changed IP addresses and passwords on internet-connected U.S. water system computers, locking out operators weeks after the U.S. bombed Iranian water infrastructure, which is a violation of humanitarian law. And Trump is blaming Minnesota? Okay, buddy. Sure
@senschumer Chuck Schumer on x
Trump is making Americans less safe with his war in Iran Hundreds of servicemembers injured, 18 dead, skyrocketing prices—now cyberattacks on the Homeland The GOP needs to stand up to this lunacy and work with us to end this dangerous and unnecessary war https://www.nytimes.com/.…
@simonwdc Simon Rosenberg on bluesky
Where is our government? Trump? DHS Secretary Mullin? Is the American homeland under attack? — www.nytimes.com/2026/08/01/u...

Chronicles