Georgia and Michigan have become the latest US states to report cyberattacks targeting water systems, as federal authorities investigate a wave of intrusions affecting utilities across at least seven states.
Michigan’s Department of Environment, Great Lakes, and Energy said nine water systems had reported hostile cyber activity.
Communications director Dale George said the department had received a small number of reports consistent with the incidents first identified in Minnesota.
He said all affected systems continued to operate safely, with no known impacts posing a risk to public health.
Georgia also confirmed that water facilities in the state had experienced similar activity, but said the impact had been limited.
Neither state has issued a public-facing alert about the incidents.
Commenting on this news is Paul Bischoff, Consumer Privacy Advocate at Comparitech:
“I think the question a lot of people are asking now is whether these attacks are coming from a state-sponsored threat actor, e.g. Iran, or more typical profit-seeking cybercrimnals. Most experts seem to agree the attacks were linked to Iran at this stage.
A cyberattack on a water treatment plant is nothing new. We see ransomware attacks on all levels of public infrastructure all of the time. But these attacks are not coordinated and most likely come from cybercriminal gangs looking for low hanging fruit–easily phished employees and known software vulnerabilities.
State-sponsored attacks tend to be more targeted and persistent. They can use more sophisticated techniques, stockpile vulnerabilities, and pay a lot of money for initial access. Iran might not pose much of a cyber threat in the end, but we can surmise how much more severe such a campaign would be if it came from Russia or China.”
All states along with anyone who has critical systems in play need to get a handle on this quickly. Otherwise the seriously risk getting pwned and pwned good.
Related
This entry was posted on August 4, 2026 at 12:45 pm and is filed under Commentary with tags Hacked. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Georgia and Michigan confirm water system hacking incidents
Georgia and Michigan have become the latest US states to report cyberattacks targeting water systems, as federal authorities investigate a wave of intrusions affecting utilities across at least seven states.
Michigan’s Department of Environment, Great Lakes, and Energy said nine water systems had reported hostile cyber activity.
Communications director Dale George said the department had received a small number of reports consistent with the incidents first identified in Minnesota.
He said all affected systems continued to operate safely, with no known impacts posing a risk to public health.
Georgia also confirmed that water facilities in the state had experienced similar activity, but said the impact had been limited.
Neither state has issued a public-facing alert about the incidents.
Commenting on this news is Paul Bischoff, Consumer Privacy Advocate at Comparitech:
“I think the question a lot of people are asking now is whether these attacks are coming from a state-sponsored threat actor, e.g. Iran, or more typical profit-seeking cybercrimnals. Most experts seem to agree the attacks were linked to Iran at this stage.
A cyberattack on a water treatment plant is nothing new. We see ransomware attacks on all levels of public infrastructure all of the time. But these attacks are not coordinated and most likely come from cybercriminal gangs looking for low hanging fruit–easily phished employees and known software vulnerabilities.
State-sponsored attacks tend to be more targeted and persistent. They can use more sophisticated techniques, stockpile vulnerabilities, and pay a lot of money for initial access. Iran might not pose much of a cyber threat in the end, but we can surmise how much more severe such a campaign would be if it came from Russia or China.”
All states along with anyone who has critical systems in play need to get a handle on this quickly. Otherwise the seriously risk getting pwned and pwned good.
Share this:
Like this:
Related
This entry was posted on August 4, 2026 at 12:45 pm and is filed under Commentary with tags Hacked. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.