Suspected Iranian Cyber Campaign Targets Water Systems Across at Least Seven U.S. States

U.S. authorities are investigating what officials believe may be a coordinated cyber campaign targeting water utility systems in at least seven states, with early intelligence assessments pointing to possible Iranian involvement, according to officials and cybersecurity experts familiar with the investigation.

While no disruptions to drinking water supplies or water quality have been reported, the attacks prompted emergency responses from local and federal authorities amid concerns that hackers were attempting to compromise computer systems responsible for monitoring and managing critical water infrastructure.

Federal officials have not publicly identified all of the affected states. However, authorities in Minnesota and Michigan confirmed that water utilities in their jurisdictions were targeted. Officials said additional states may also have experienced attempted intrusions as the investigation continues.

Iran Emerges as Primary Suspect

Senior U.S. officials cautioned that the investigation remains in its early stages and that attributing sophisticated cyberattacks often requires months of forensic analysis. Nevertheless, intelligence agencies currently view Iran as the leading suspect, according to officials familiar with the matter.

Authorities noted that Iran has significantly increased its cyber activity against U.S. interests since the outbreak of the regional conflict earlier this year and has previously attempted to penetrate American water systems and other elements of critical infrastructure.

Investigators are working with the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), and state authorities to determine the scope of the campaign and identify those responsible.

Trump Downplays Iranian Role

President Donald Trump on Friday dismissed suggestions that Iran was behind the attacks, instead pointing to possible failures by local authorities.

"I think Minnesota is behind it," Trump told reporters when asked about the suspected cyber campaign. "I don't think it was an Iranian cyberattack."

His comments contrast with the preliminary assessment of several U.S. intelligence agencies, which officials say increasingly believe Iranian-linked cyber actors were responsible, although no final attribution has been made.

Local Officials Cite FBI Briefings

Nate George, mayor of Braham, Minnesota, said local officials have received regular updates from state authorities and the FBI.

"We're getting pieces of information from the state and from the FBI," George told The New York Times. "They seem fairly confident that Iranian actors are involved."

Federal officials stressed, however, that cyber attribution is inherently complex and that public conclusions will depend on the outcome of the ongoing investigation.

Nationwide Alert for Water Utilities

Following the attacks, water utilities and public infrastructure operators across the United States were advised to strengthen cybersecurity defenses, review network monitoring systems, and prepare for additional intrusion attempts.

Cybersecurity experts warned that water systems remain attractive targets because many rely on aging industrial control systems that were not originally designed to withstand sophisticated cyber threats.

The incidents have renewed concerns over the vulnerability of America's critical infrastructure to state-sponsored cyber operations, particularly as geopolitical tensions between Washington and Tehran remain elevated.

Critical Infrastructure Under Growing Threat

Although the latest attacks caused no operational damage, security officials warned that attempts to penetrate essential infrastructure should be viewed as a serious national security concern.

Analysts say state-backed cyber operations are increasingly aimed not only at gathering intelligence but also at demonstrating the capability to disrupt essential public services during periods of heightened international tension.

The investigation remains ongoing, and U.S. authorities have not yet formally attributed responsibility for the attacks.