The FBI and EPA issued a warning on July 31, 2026 [3], stating that utilities nationwide face increased cyberattacks on critical water infrastructure.

These warnings highlight significant security gaps in the systems that provide essential drinking water to millions of Americans. The targeting of municipal utilities suggests a shift toward attacking physical infrastructure to create public instability.

Law enforcement officials said the attacks were linked to hackers from Iran [1]. According to the agencies, these actors have been specifically targeting municipal water systems to expose growing vulnerabilities within the U.S. critical water infrastructure [1].

The scope of the intrusions is widespread, with attacks reported in at least seven states [1]. In Minnesota, the impact was particularly acute, where more than 30 municipal water facilities were affected [1].

Federal officials said the coordination between the FBI and the EPA is intended to help local utilities secure their networks against further intrusions. The agencies are urging water providers to review their cybersecurity protocols and report any suspicious activity immediately [1].

The reports indicate that the hackers utilized vulnerabilities in the software used to manage water systems. By gaining access to these controls, attackers could potentially alter chemical levels, or disrupt the flow of water to residential areas [1].

While the agencies have not detailed the specific outcomes of the Minnesota breaches, the scale of the attack — involving dozens of facilities in a single state — underscores the systemic nature of the threat [1].

“Utilities nationwide face increased cyberattacks on critical water infrastructure.”

The targeting of water utilities by foreign actors represents a transition from data theft to the potential disruption of life-sustaining services. By focusing on municipal systems, which often have smaller budgets and fewer cybersecurity resources than federal agencies, these hackers can exploit 'soft targets' to demonstrate capability and create widespread public alarm.