IRGC-Linked CyberAv3ngers Expand Water System Campaign to Seven US States

IRGC-linked CyberAv3ngers exploited default-password-protected operational technology controllers governing pumps, pressure, and valves at water and wastewater utilities across at least seven US states, with Georgia and Michigan the newest to report intrusions 12. Clayton County Water Authority, serving roughly 300,000 metro Atlanta customers, is investigating a service outage as a possible link to the campaign; officials say drinking water safety has not been compromised 3. The FBI has not made formal attribution to Iran, though the intrusion techniques mirror CyberAv3ngers' 2023 campaign that seized a water authority device in Aliquippa, Pennsylvania 2. An OT-security industry coalition is pressing Congress and CISA to enact sector reforms in response to the hacks 4.