IC Technology & Cyber — 2026-08-02

FBI and CISA Respond to Iran-Linked Cyberattacks on Water Utilities Across Seven States

BLUFFormal US attribution of the water utility campaign to Iran remains genuinely uncertain within the next two months, as the president's public denial constrains agencies whose own evidence points toward Tehran.

CISA on Thursday warned of a "significant increase" in cyber threat activity targeting programmable logic controllers across the Water and Wastewater Systems sector, reporting that threat actors modified passwords to lock out operators and altered PLC IP addresses, producing boil water notices and sustained manual operations at affected utilities 1. The FBI and EPA said Friday they are responding to cyberattacks at water utilities in at least seven states, with some utilities reporting loss of pressure and flooding that risked allowing untreated groundwater into pipes 2. Minnesota's state IT agency disclosed Tuesday that at least 30 community water systems in the state were breached in a "coordinated attack" but did not name a perpetrator 2. President Trump said Friday he did not believe Iran was responsible and blamed Minnesota's government for incompetence, a claim FBI, EPA and CISA spokespeople did not corroborate when asked for comment, while federal, state and water industry officials cited by Politico suspect Iran-linked hackers are behind the campaign 2.

Analysis
Trump's public rejection of Iranian responsibility, unconfirmed by FBI, EPA, or CISA spokespeople, creates a political disincentive for those agencies to issue a formal attribution even as officials privately suspect Tehran-linked actors. Whether Washington names Iran within the next two months is genuinely uncertain, since forensic confirmation and the administration's political posture pull in opposite directions. Moderate confidence rests on the split between agency-level suspicion and the president's public denial, an unusual signal that complicates but does not resolve the calculus. Continued PLC intrusions and boil-water notices raise pressure for utilities to disconnect exposed OT regardless of attribution outcome.

2 sources