Soufan Center Assesses Iranian Cyberattacks on Water Systems Across 12 US States as Grey Zone Capabilities Test After CISA FBI and NSA Issue Joint Advisory

Water utilities in at least 12 states, including Michigan, Minnesota, Georgia, New Jersey and South Dakota, have reported cyberattacks on operational technology, up from the seven states cited in a July 30 joint FBI, EPA and CISA advisory warning that threat actors had remotely accessed water and wastewater control systems 1. More than 30 Minnesota community water systems were affected 1, and Georgia's Clayton County Water Authority, serving 300,000 Atlanta-area customers, reported a pressure drop and issued a boil water advisory later lifted 12. The FBI said the intrusions share common hallmarks, including changed passwords and loss of remote monitoring and control, with effects including pressure loss and flooding 2. Federal agencies have not formally attributed the campaign, but sources cited by CBS News and The Record identify Iran-backed hackers as the suspected actor 12, and officials report no impact on drinking water safety 1Grey Zone Capabilities" data-source="The Soufan Center" data-url="https://thesoufancenter.org/intelbrief-2026-august-7/" data-otype="think_tank">3.