US probes possible Iranian-linked cyberattacks on water systems in seven states
US authorities are investigating reported cyberattacks on water systems in Minnesota and six other states, after officials said some of the activity disrupted water operations. Minnesota first reported that more than 30 of its state water systems had faced what it described as a coordinated cyberattack. Days later, the FBI said cyberattacks had been reported in seven states, widening the scope of the inquiry.
Sponsored
The US Cybersecurity and Infrastructure Security Agency is reportedly examining whether there is a possible Iranian connection to the Minnesota attacks, according to US media reports. The agency has not commented publicly on the reported probe. US President Donald Trump has not formally blamed Iran, but he did criticise Minnesota officials at a cabinet meeting last Friday, calling them grossly incompetent.
The reported disruption matters because water systems are part of critical infrastructure and can affect public services even when the impact is limited. The FBI said some of the activity had degraded water operations, although the extent of the disruption has not been fully detailed. Minnesota Governor Tim Walz, a Democrat, responded that Trump knew exactly who was responsible and knew that other states had also been hit.
The case comes against the backdrop of long-running concern in the United States about cyber threats to essential services. Water utilities have been viewed as attractive targets because they are often locally run and may have fewer resources than larger federal systems. The current investigation is also unfolding during heightened tension between the US and Iran, which has shaped how officials and analysts are interpreting the reported attacks.
Sponsored
Cyber experts quoted in the reporting said attacks of this kind are often attributed to North Korea or Iran. One former US State Department anti-terror adviser said Iran rises to the top of the list of states capable of carrying out such activity and having a motive to do so. Another former White House cyber official said the political climate could make it harder for the administration to acknowledge an Iranian role even if investigators confirm one.
Iran has not commented on the latest allegations. It has repeatedly denied involvement in previous cyberattacks, including incidents involving water systems, presidential campaigns, hospitals and a Las Vegas casino company in 2014. After a 2016 accusation linked to the targeting of banks and a dam outside New York City, Iran's foreign ministry said the US should prove such claims and denied supporting dangerous activity in cyberspace.
The reported attacks also raise questions about attribution, which can be difficult in cyber cases because attackers can disguise their location or identity. Investigators are reportedly considering whether hackers may have posed as Iran-based actors to deepen confusion and discord. That possibility means the inquiry is not only about whether systems were accessed, but also about who was behind the activity and what their aim may have been.
What remains unclear is the full scale of the disruption, which states were affected beyond Minnesota, and whether investigators will confirm any Iranian link. It is also not known whether the incidents were connected to one another or carried out by separate actors. Officials have not said when they expect to provide further findings, and the investigation appears to be ongoing.
Sponsored
Sponsored
