--- title: What we know about the alleged Iranian hacks on US water... description: Since late July, coordinated cyberattacks have hit water and wastewater utilities across roughly a dozen U.S. states, including Minnesota, Arkansas, Georgia,... canonical: https://daily.dev/posts/what-we-know-about-the-alleged-iranian-hacks-on-us-water-utilities-ppbezomds twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: What we know about the alleged Iranian hacks on US water utilities | daily.dev og:description: Since late July, coordinated cyberattacks have hit water and wastewater utilities across roughly a dozen U.S. states, including Minnesota, Arkansas, Georgia,... og:url: https://daily.dev/posts/what-we-know-about-the-alleged-iranian-hacks-on-us-water-utilities-ppbezomds og:image: https://api.daily.dev/og/posts/PPbezOmds.png og:image:alt: What we know about the alleged Iranian hacks on US water utilities og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # What we know about the alleged Iranian hacks on US water utilities **[TechCrunch](https://daily.dev/sources/tc)** · 5 min read · 21 upvotes · 3 comments ## Summary Since late July, coordinated cyberattacks have hit water and wastewater utilities across roughly a dozen U.S. states, including Minnesota, Arkansas, Georgia, New Jersey, and Michigan. The FBI reported some attacks degraded water operations, causing pressure loss and, in a few cases, forced plants offline or prompted boil-water advisories. U.S. intelligence agencies reportedly believe Iran's IRGC is behind the campaign, though attribution has not been made official, and President Trump publicly disputed an Iranian link, instead blaming Minnesota's state government. Security firm Forescout found over 2,800 internet-exposed water system controllers nationwide, underscoring how exposed and under-resourced many of the 150,000+ U.S. water systems are. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What effects have the recent cyberattacks had on US water utilities? Some attacks caused loss of water pressure, which the FBI said could allow untreated groundwater to seep into pipes, and led to flooding in isolated cases. The town of Braham, Minnesota took its water plant offline for a few hours and urged about 1,700 residents to conserve water, Maple Plain, Minnesota briefly declared a state of emergency, and a county near Atlanta, Georgia issued a temporary boil-water notice. _daily.dev surfaces incident reports like these for teams assessing OT security exposure in critical infrastructure._ ### How many water system controllers are exposed to the internet in the United States? Cybersecurity firm Forescout found more than 2,800 controllers in US water systems exposed online, highlighting how accessible some operational technology remains to attackers. Exposure alone does not guarantee hackers can seize control and cause physical effects, but it has happened in isolated cases during the recent wave of attacks attributed to Iran. _Engineers hardening exposed OT devices can track findings like this via daily.dev._ ### Who is suspected of being behind the 2026 cyberattacks on US water utilities? US intelligence agencies are reportedly confident that Iran, specifically the Islamic Revolutionary Guard Corps (IRGC), is responsible, though official public attribution has not been made. WaterISAC told members the attacks aligned with a hacking campaign CISA had warned about involving Iranian actors targeting internet-connected water and energy systems, while President Trump publicly disputed Iranian involvement. _Those tracking nation-state threat attribution can follow developing analysis on daily.dev._ ## Community discussion Top comments from developers on daily.dev. **@nibhagupta** · 4 upvotes > Why is the Water Supply terminal on the internet ? **@petecapecod** · 4 upvotes > so the FBI puts out a warning this was going to happen, but then trump says the people at the water department just don't know how the water works. What??? > > I would suspect Iran, that's how 21st century war works bros. **@jliter85** · 1 upvotes > This is exactly why cybersecurity for critical infrastructure matters so much. When an attack can potentially affect something as basic as your water supply, it’s no longer just an IT problem. The number of systems still exposed online is probably the part that concerns me the most. ## Similar posts on daily.dev - [Stolen passwords are exposing America’s water providers to hackers](https://daily.dev/posts/stolen-passwords-are-exposing-america-s-water-providers-to-hackers-9zsy7abhk) · TechCrunch · 0 upvotes · 0 comments - [Critical infrastructure’s long, undefended tail exposed by UK energy attack](https://daily.dev/posts/critical-infrastructure-s-long-undefended-tail-exposed-by-uk-energy-attack-hajfwhwyk) · CSO Online · 0 upvotes · 0 comments - [Securing Critical Infrastructure in a Time of War](https://daily.dev/posts/securing-critical-infrastructure-in-a-time-of-war-sryiawokv) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber) [View this post on daily.dev](https://daily.dev/posts/what-we-know-about-the-alleged-iranian-hacks-on-us-water-utilities-ppbezomds) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"What we know about the alleged Iranian hacks on US water utilities","url":"https://daily.dev/posts/what-we-know-about-the-alleged-iranian-hacks-on-us-water-utilities-ppbezomds","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/what-we-know-about-the-alleged-iranian-hacks-on-us-water-utilities-ppbezomds"},"datePublished":"2026-08-14T19:05:06.959Z","dateModified":"2026-09-14T07:05:27.102Z","description":"Since late July, coordinated cyberattacks have hit water and wastewater utilities across roughly a dozen U.S. states, including Minnesota, Arkansas, Georgia,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f301298d57d7e0948f4b5dca73d7cb69?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f301298d57d7e0948f4b5dca73d7cb69?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCrunch","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCrunch","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tc","url":"https://daily.dev/sources/tc"},"commentCount":3,"discussionUrl":"https://daily.dev/posts/what-we-know-about-the-alleged-iranian-hacks-on-us-water-utilities-ppbezomds","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":21},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":3}],"keywords":"cyber","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCrunch","item":"https://daily.dev/sources/tc"},{"@type":"ListItem","position":3,"name":"What we know about the alleged Iranian hacks on US water utilities"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/what-we-know-about-the-alleged-iranian-hacks-on-us-water-utilities-ppbezomds","comment":[{"@type":"Comment","text":"Why is the Water Supply terminal on the internet ?","datePublished":"2026-08-15T13:57:00.743Z","url":"https://daily.dev/posts/PPbezOmds#c-Ugeu91zfE","author":{"@type":"Person","name":"Nibha Gupta","url":"https://daily.dev/nibhagupta","image":"https://lh3.googleusercontent.com/a/ACg8ocLbRtMHtTHtvMSHNAcvhY_2N1Dk_xd76yrQvGdrKyY1hIiQo6pd=s96-c"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4}},{"@type":"Comment","text":"so the FBI puts out a warning this was going to happen, but then trump says the people at the water department just don’t know how the water works. What???\nI would suspect Iran, that’s how 21st century war works bros.","datePublished":"2026-08-15T12:07:20.974Z","url":"https://daily.dev/posts/PPbezOmds#c-7p2upBrtI","author":{"@type":"Person","name":"Peter Cruckshank","url":"https://daily.dev/petecapecod","image":"https://media.daily.dev/image/upload/s--ZJhQyKws--/f_auto/v1721235024/avatars/avatar_A9xh33q0QoxtkGoJRCosp"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4}},{"@type":"Comment","text":"This is exactly why cybersecurity for critical infrastructure matters so much. When an attack can potentially affect something as basic as your water supply, it’s no longer just an IT problem. The number of systems still exposed online is probably the part that concerns me the most.","datePublished":"2026-08-16T17:23:22.986Z","url":"https://daily.dev/posts/PPbezOmds#c-gW1GR4LiK","author":{"@type":"Person","name":"John Liter","url":"https://daily.dev/jliter85","image":"https://media.daily.dev/image/upload/s--DQ2HUrO4--/f_auto/v1785100315/avatars/avatar_yHf9cPdgTQEtokv6d8qhM?_a=BAMAMicg0"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1}}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/what-we-know-about-the-alleged-iranian-hacks-on-us-water-utilities-ppbezomds#faq","mainEntity":[{"@type":"Question","name":"What effects have the recent cyberattacks had on US water utilities?","acceptedAnswer":{"@type":"Answer","text":"Some attacks caused loss of water pressure, which the FBI said could allow untreated groundwater to seep into pipes, and led to flooding in isolated cases. The town of Braham, Minnesota took its water plant offline for a few hours and urged about 1,700 residents to conserve water, Maple Plain, Minnesota briefly declared a state of emergency, and a county near Atlanta, Georgia issued a temporary boil-water notice. daily.dev surfaces incident reports like these for teams assessing OT security exposure in critical infrastructure."}},{"@type":"Question","name":"How many water system controllers are exposed to the internet in the United States?","acceptedAnswer":{"@type":"Answer","text":"Cybersecurity firm Forescout found more than 2,800 controllers in US water systems exposed online, highlighting how accessible some operational technology remains to attackers. Exposure alone does not guarantee hackers can seize control and cause physical effects, but it has happened in isolated cases during the recent wave of attacks attributed to Iran. Engineers hardening exposed OT devices can track findings like this via daily.dev."}},{"@type":"Question","name":"Who is suspected of being behind the 2026 cyberattacks on US water utilities?","acceptedAnswer":{"@type":"Answer","text":"US intelligence agencies are reportedly confident that Iran, specifically the Islamic Revolutionary Guard Corps (IRGC), is responsible, though official public attribution has not been made. WaterISAC told members the attacks aligned with a hacking campaign CISA had warned about involving Iranian actors targeting internet-connected water and energy systems, while President Trump publicly disputed Iranian involvement. Those tracking nation-state threat attribution can follow developing analysis on daily.dev."}}]} ```