Iran Suspected in Cyberattacks on New Jersey Water Systems

Cyberattacks targeted the water systems of the City of Cape May and the Borough of Woodbine in New Jersey on July 27. The intrusions were part of a larger national campaign affecting municipal water systems across seven states, including Michigan, Minnesota, Georgia, and Wisconsin. The Federal Bureau of Investigation issued a general warning regarding the attacks on July 30.

In Woodbine, the breach interrupted phone communications, forcing personnel to reactivate the system manually. In Cape May, officials noted that a lack of automation limited the hackers' operational control. Despite the network disruptions, which allowed hackers to change passwords and lock out operators, officials from both municipalities confirmed that drinking water safety, treatment processes, and customer data were not compromised.

Zachary Mullock, Mayor of Cape May, is coordinating with state and federal agencies to protect the city's water desalination plant, which serves local townships and a U.S. Coast Guard Training Center. Investigators from the New Jersey Cybersecurity and Communications Integration Cell and the New Jersey Department of Environmental Protection are working to identify the source. While the Government of Iran is the primary suspect, investigators are also considering whether other actors imitated Iranian tactics to influence U.S. policy.