Cyberattacks on U.S. water systems have grown to include at least seven states, with officials warning that the scope of the attacks may be far wider. While there are no indications that any water supply has been altered or made unsafe to drink, state and local officials are on high alert for potential problems in vulnerable computers used to monitor and adjust water quality.

Investigation Ongoing

Officials have declined to say which states have been affected, but a spokesperson for the Michigan state government confirmed that the state’s system was attacked. Minnesota was the first to publicly report the attacks, and now other states are probing their own water systems. The FBI and the Environmental Protection Agency have reported that at least seven states have been affected, with some activity degrading water operations.

Iran is suspected to be behind the attacks, although officials caution that the investigation is still preliminary. The U.S. Cybersecurity and Infrastructure Security Agency has warned that Iran may seek to compromise water utilities and other critical infrastructure. The agency has recommended that facilities unplug vulnerable controllers from the internet to prevent further attacks.

Local Impact

In Michigan, nine municipal water systems have reported issues, while in Minnesota, hackers were spotted targeting roughly three dozen municipalities. The attacks have resulted in boil water notices and sustained manual operations in some areas. Local officials are working to patch affected water systems and bolster defenses against future attacks.

The incident highlights the need for improved cybersecurity measures to protect critical infrastructure. As one mayor noted, the attack has shown that even small municipalities can be vulnerable to cyber threats, and that upgrading IT infrastructure can be costly.

Original reporting: Texarkana Gazette — read the source article.