At Least 12 States Face Cyberattacks on Their Water Systems, Sources Say

Sources say cyberattacks aimed at municipal water and wastewater systems have affected at least 12 U.S. states, with utilities reporting breaches that degrade monitoring and control. In some places, operations were disrupted or moved to manual procedures while investigators assess the scope of the intrusion. Federal agencies have warned that attackers look for internet-exposed control systems—such as programmable logic controllers—and attempt to gain access, including via credentials. Officials urged utilities to harden network boundaries, restrict access to control devices, and improve password and firewall hygiene.