NewsPublished 10 Aug 2026

New Jersey, Alabama Join States Targeted in Water Cyberattacks

Source SecurityWeek

Description

Hackers linked to Iran targeted industrial control systems (ICS) at water facilities in at least a dozen US states. The post New Jersey, Alabama Join States Targeted in Water Cyberattacks appeared first on SecurityWeek .

Impact

The attacks targeted critical ICS infrastructure in the water sector but did not cause significant operational disruptions or compromise water safety. Some facilities experienced limited disruptions such as phone system outages. The campaign highlights the risk of cyber threats to critical infrastructure but, to date, has not resulted in damage or service outages. The water utilities and states involved have communicated to the public that drinking water remains safe.

Defensive guidance

CISA has urged water sector organizations to secure their operational technology environments. Facilities should review and strengthen ICS/OT security controls and incident response plans. Since no significant impact has been reported, no emergency remediation beyond standard OT security best practices is indicated at this time.

Summary

In a coordinated cyberattack campaign starting in late July 2026, Iranian-linked hackers targeted ICS devices at water and wastewater facilities across at least 12 US states. Confirmed targets include New Jersey, Alabama, Minnesota, Michigan, South Dakota, and Georgia. The attackers focused on operational technology systems, specifically ICS devices from Rockwell Automation and potentially other major vendors. Although some facilities shut down systems to mitigate risk, there have been no reported significant disruptions to water services or safety issues. The FBI confirmed at least seven states targeted as of July 30, and CISA has issued advisories urging improved OT security in the water sector.

References

securityweek.com/new-jersey-alabama-join-states-targeted-in-water-cyberattacks/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 10 Aug 2026, 11:56 UTC

References

Community reviews

Related threats