Iran-linked hackers target water systems in New Jersey, Alabama; 12 US states affected
This digest was compiled by AI from multiple sources — links to the originals are below.
New Jersey and Alabama confirmed water systems were targeted in an Iranian-linked cyberattack campaign that has now affected at least 12 states, officials said. The attacks, which began in late July, disrupted phone systems in Cape May and Woodbine, New Jersey, but water services remained safe. No significant impact was reported, even as federal agencies urged the water sector to secure operational technology.
Affected States
At least 12 states have confirmed attacks on water and wastewater facilities since the campaign began in late July. Minnesota reported over 30 water systems targeted, while Michigan, South Dakota, and Georgia have also acknowledged incidents. New Jersey's Cape May and Woodbine systems were hit on July 27, disrupting only phone services, and Alabama's Childersburg system saw an unsuccessful attack on industrial controllers. Wisconsin, Pennsylvania, and Washington issued warnings but have not confirmed breaches. New York announced $9 million in cybersecurity grants for water utilities without confirming any attacks.
Perpetrators and Response
The FBI linked the attacks to Iranian hackers targeting industrial control systems from Rockwell Automation and other vendors. CISA urged water utilities to secure operational technology in response to the campaign. Despite the intrusions, no water contamination or service outages occurred, and officials across all states underscored that drinking water remains safe. Federal agencies have not released updated figures since confirming seven targeted states as of July 30. The campaign highlights persistent vulnerabilities in critical infrastructure, with hackers exploiting internet-facing OT devices.
What's Next
U.S. authorities are expected to release an updated assessment of the attacks in coming days, but the exact number of affected utilities may remain unknown. Analysts warn that while no damage occurred, the accessibility of water infrastructure to state-linked hackers raises national security concerns ahead of upcoming cybersecurity directives.
1 source
Iran-linked hackers target water systems in New Jersey, Alabama; 12 US states affected
