Federal Agents Launch Investigation Into Cyberattacks Targeting State Water Infrastructure

The Federal Bureau of Investigation is investigating cyber incidents aimed at water and wastewater infrastructure in Michigan and Minnesota, officials confirmed on Saturday. State authorities said the activity has not affected water safety or disrupted service, but monitoring is continuing as agencies look for additional anomalies.

The cases add to broader concern among officials about cyber threats against critical domestic systems that underpin public health and daily services. Authorities said the reported activity reflects pressure on local utilities from unauthorized attempts to access the technology used to run and supervise essential operations.

Unauthorized activity reported in Michigan and Minnesota The Federal Bureau Officials said nine water systems in Michigan reported unauthorized activity linked to the recent wave of incidents. In Minnesota, authorities reported similar activity across 30 sites. The state reports came after a federal advisory warning that potential breaches could affect infrastructure in at least seven states. Officials have not publicly identified which other states were included in that advisory. Remote monitoring and control technology in focus Officials said the reported activity involved exploitation of operational technology used to remotely monitor systems and control equipment. Authorities described this as the type of technology commonly used to oversee treatment processes and track equipment performance.

Even with the reported unauthorized access attempts

Even with the reported unauthorized access attempts, authorities emphasized that current assessments indicate the water remains safe and service has continued. Officials said agencies are continuing to watch for irregular activity as the investigation progresses.

Legacy cybersecurity and attribution questions

Officials said the incidents underscore persistent weaknesses at local water plants, many of which rely on legacy cybersecurity infrastructure. They said dependence on older systems can complicate upgrades and make consistent security controls harder to apply across dispersed municipal facilities.

Federal agencies, including the Cybersecurity and Infrastructure Security Agency, have previously identified Iranian actors as potential threats to these sectors. Officials have not announced a definitive attribution for the Michigan and Minnesota incidents.

The investigation is unfolding amid heightened geopolitical tensions and domestic political friction. Officials said federal agencies are coordinating to help secure critical infrastructure, while attribution has become a point of contention between the White House and state leadership.

Authorities said they will continue tracking unusual activity and working to strengthen defenses against ongoing digital incursions. Officials said the investigation remains ongoing and have not provided a timeline for conclusions or any public findings.