Iran-Linked Hackers Target Water Facilities in Seven U.S. States

Hackers affiliated with Iran targeted water and wastewater facilities across at least seven U.S. states starting around July 27, 2026. The attacks caused pressure disruptions at the Clayton County Water Authority in Georgia and triggered an emergency declaration in Maple Plain, Minnesota. While federal officials confirmed that no water supplies were rendered unsafe, they warned on August 19 that the attackers were attempting to breach Siemens devices used in critical infrastructure.

In response to the vulnerabilities, Senators Amy Klobuchar and Adam Schiff introduced the Water Cyber Shield Act on August 13 to expand the powers of the Environmental Protection Agency. Additionally, the American Water Works Association endorsed the Water Risk and Resilience Organisation Establishment Act to create an independent body for security standards.

Despite these legislative pushes, Donald Trump proposed a budget that would cut the primary water cyber-security funding for the Environmental Protection Agency by nearly 90%. The president has publicly disputed that the attacks in Minnesota originated from Iran, stating, "Iran’s got bigger problems than worrying about Minnesota."