Coordinated Cyberattacks Disrupt U.S. Water Utilities in July 2026

In late July 2026, a series of cyberattacks targeted over 30 community water systems in Minnesota and other states, disrupting operations and prompting a joint advisory from the FBI, EPA, and CISA. The attacks focused on operational and administrative systems essential for safe water delivery. CISA reported a significant increase in threat activity aimed at programmable logic controllers in the water sector. The advisory emphasized immediate actions for utilities, including isolating affected systems and hardening their defenses. Operators were advised to prepare for incidents without reliable telecommunications, highlighting the need for manual coordination during crises. The attacks occurred amid a broader context of increased cyber threats to critical infrastructure. The current status remains under assessment as utilities implement the advisory's recommendations.

Key Points: • Over 30 water systems in Minnesota and other states were disrupted by cyberattacks. • The FBI, EPA, and CISA issued a joint advisory detailing immediate response actions. • Utilities are urged to prepare for incidents without reliable telecommunications.