Iranian Hackers Target U.S. Water Utilities Amid CISA Personnel Cuts

The Cybersecurity and Infrastructure Security Agency (CISA) is recovering from significant personnel cuts and is focusing on securing drinking and wastewater utilities. Acting Director Nick Andersen reported that CISA is hiring again after job losses in 2025. The agency is prioritizing essential services, particularly telecommunications and water systems, which have been under attack. Hackers believed to be from Iran have targeted at least seven U.S. states, exploiting vulnerabilities in programmable logic controllers used in these utilities. State officials in Minnesota and Michigan confirmed that dozens of utilities were affected by these attacks. CISA has been actively visiting impacted facilities to assess needs and provide technical assistance. The agency aims to restore key services to better protect against malicious activities.

Key Points: • CISA is recovering from major job cuts and is focused on critical infrastructure security. • Iranian hackers have targeted drinking and wastewater utilities in at least seven states. • CISA is providing technical assistance to affected utilities to enhance security.