Hackers target over 100 US water systems in wave of digital intrusions

The Cybersecurity and Infrastructure Security Agency (CISA) identified the attacks as part of a broader campaign hitting states including Michigan and Minnesota. Hackers are specifically exploiting programmable logic controllers (PLCs) manufactured by Rockwell, Schneider Electric, and Siemens. In some instances, these intrusions allowed attackers to disable shutdown processes and alarms, potentially creating unsafe operating conditions without alerting local utility staff.

Investigators suggest the use of AI tools to develop scripts tailored to these specific hardware vulnerabilities. While the incidents have not halted water services, they have triggered widespread outages as teams scramble to secure the affected networks. Intelligence officials suspect Iranian actors may be behind these specific probes, though a formal attribution remains pending. These events join a growing list of threats to American infrastructure, including reports of Chinese malware embedded in power grids and Russian interference with European energy sectors, raising urgent questions about the resilience of basic municipal services.