Story perspectives

Cyberattacks Hit Water Utilities in 12 States, CISA Urges Action

8/7/2026

Center

Water Utilities Attacked

In late July 2026, cyberattacks targeted water and wastewater utility systems in a dozen U.S. states.
CISA advised utilities to remove internet-exposed controllers, reset passwords and install firewalls.
Georgia water authority reported a July 27 intrusion that caused a pressure drop, a boil-water advisory, and service restored within hours.
Minnesota officials confirmed access to more than 30 community water systems, prompting operators to shut down remote controllers and run equipment manually.

Left

Trump Blames Minnesota

In late July 2026, cyberattacks targeted water and wastewater utility systems in at least a dozen U.S. states.
President Donald Trump blamed Minnesota for the attacks and had earlier proposed $707 million cuts to the agency overseeing utility cybersecurity.
About 97 % of U.S. water systems are small, run utilities that lack basic cybersecurity safeguards.
In Minnesota, the hacks caused flow reduction and boil-water notices, though no contamination was reported.

Blindspot

President Donald Trump said Minnesota was responsible for the water-system cyberattacks and noted his earlier proposal to cut $707 million from the Cybersecurity and Infrastructure Security Agency.
Within this story's sources, this angle appears mainly in Left-leaning coverage and receives less attention in Center-leaning coverage.

History

Historical Context

In June 2010 the Stuxnet worm—identified by Sergey Ulasen and later linked to a U.S.–Israel Operation Olympic Games—infected Siemens SCADA systems and destroyed roughly 1,000 Iranian centrifuges. Its unprecedented sabotage of industrial control led to the 2015 NIST Cybersecurity Framework for critical infrastructure. The 2026 water-utility attacks on Georgia and Minnesota echo that legacy, showing how exposed PLCs remain a national-security risk.

1 of 4

Water Utilities Attacked

In late July 2026, cyberattacks targeted water and wastewater utility systems in a dozen U.S. states.
CISA advised utilities to remove internet-exposed controllers, reset passwords and install firewalls.
Georgia water authority reported a July 27 intrusion that caused a pressure drop, a boil-water advisory, and service restored within hours.
Minnesota officials confirmed access to more than 30 community water systems, prompting operators to shut down remote controllers and run equipment manually.

1 / 4