Source: Fortune
Summary
Hackers attempted to break into at least 30 municipal water systems in Minnesota on July 26-27, 2026. Similar cyberattacks have been reported in Michigan, New Jersey, and several other states. The attackers targeted small computers called programmable logic controllers that operate equipment such as pumps and valves. Utility officials countered the attacks by shutting down the control computers and manually operating equipment. The methods used in these incidents are typical of international cyberattacks, with initial suspicion falling on hackers allegedly aligned with Iran.
Our Reading
The strategy enters a familiar phase.
The hackers accessed small computers called programmable logic controllers at the water systems that operate all sorts of industrial equipment. The controllers read sensors and automatically operate pumps, valves, and alarms. The attackers exploited the access they gained by changing passwords, issuing commands, or attempting to alter the controller’s software. Utilities with limited resources are a significant vulnerability in the United States’ critical infrastructure. A group of volunteer cybersecurity experts is providing guidance to water utilities, but their reach is limited.
The announcement sounds like a wake-up call for water utilities to prioritize cybersecurity.
Author: Evan Null
