The FBI is investigating cyberattacks affecting water utilities after incidents first reported in Minnesota and later in Michigan. Multiple outlets report that a coordinated attack targeted operational technology (OT) systems at more than 30 community water utilities across Minnesota on July 26 and 27. Minnesota IT Services (MNIT) says it activated statewide cybersecurity incident response capabilities after learning of the intrusion, and it works with federal and private partners to contain the threat and support affected communities. Several Minnesota cities publicly described limited impacts, including plant outages, communications disruptions, or effects on automated controls, while indicating that water service remained safe and that residents could continue normal use. The Minnesota Department of Health said it was not aware of any municipality asking residents to change drinking water use.
News outlets also say that at least seven states have reported water-system cyberattacks, with CBS and other reports expanding that number as additional incidents are disclosed. Separate reporting indicates Michigan has joined Minnesota in reporting attacks on multiple water systems, though Michigan officials say systems are operating safely. CISA had previously issued warnings related to programmable logic controllers.
