Signal FBI, EPA Warn of Cyberattacks on Water Systems Across Seven US States

Summary

The FBI and EPA issued a joint Public Service Announcement on July 30, 2026, warning that malicious cyber actors have been targeting internet-facing programmable logic controllers (PLCs) at water and wastewater utilities. Since July 27, utilities in at least seven US states have reported incidents to the FBI, with some activity degrading water operations. The attackers remotely access internet-connected Rockwell Automation/Allen-Bradley PLCs (MicroLogix 1100 and 1400 series), then change IP addresses and passwords to lock out monitoring and control functions. Reported operational effects include pressure loss and flooding; pressure loss could allow untreated groundwater to seep into pipes. The warning follows the compromise of more than 30 municipal water facilities in Minnesota over the prior week, which officials say bore hallmarks of Iranian involvement, though this has not been officially confirmed. Wisconsin issued its own separate bulletin warning that systems in the state may be susceptible to similar intrusions.