New Disaster Hits America: Nation Faces Threat of Total Paralysis
The escalation of conflict between the United States and Iran is spreading aggressively into the cyber domain. The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency warning to all drinking water and wastewater treatment facility operators to immediately disconnect their operational systems from the internet. This drastic measure was taken after a wave of coordinated, successive cyberattacks targeted the nation’s vital infrastructure.
Recent reports from the Federal Bureau of Investigation (FBI) confirm that water utility companies in at least seven US states have fallen victim to these attacks. Consequently, in several locations, water operational facilities have experienced performance degradation or total functional paralysis. “Water operations are degraded in several locations due to these attacks,” the FBI stated in an official announcement, as reported by Reuters.
US officials and investigators suggest that the masterminds behind this massive hacking campaign are strongly linked to hacker groups affiliated with the Iranian government. These attacks occurred just two days after Minnesota’s state IT agency reported that more than 30 community water systems in the region were hit by planned cyberattacks on 26-27 July.
While local officials have ensured that the quality and safety of the public drinking water have not been contaminated, the physical impact of the hacking is deeply concerning. CISA revealed that in several cases, hackers successfully changed system passwords, locked operators out of access, and disconnected control devices from the main network. As a result, automated systems shut down completely, forcing staff to switch to manual operational modes for extended periods.
Furthermore, FBI victim reports indicate even more severe operational impacts in certain areas, ranging from drastic drops in water pressure to flooding incidents. Investigations found that the hackers’ primary targets were Programmable Logic Controllers (PLC)—computer systems used by operators to remotely control and monitor water equipment.
Former senior FBI cybersecurity official Cynthia Kaiser assessed that the infrastructure attacks in Minnesota represent a continuation and escalation of Iran’s cyber campaign, which had previously been mapped by US intelligence (FBI, CISA, and NSA). “The fact that the government is releasing new warnings indicates an expansion of the attack area, new technical details, or updated hacking activity—and most likely a combination of all of them,” said Kaiser, who is now an executive at the cybersecurity firm Haluna.
This cyber conflict is intensifying amidst the physical war between the US and Iran, which continues to heat up as both nations exchange missile strikes and threats of destruction. Cyberattacks targeting US vital infrastructure are not a new phenomenon. Prior to the attacks on water facilities, hacker groups linked to Tehran also successfully breached the US medical services giant, Stryker, and the Los Angeles Metropolitan Transportation Authority in March.