Michigan Reports Cyberattacks on Water Systems, FBI Investigates

Michigan has reported cyberattacks targeting nine water systems in the state, just days after Minnesota reported similar breaches statewide.

On August 3 (local time), the U.S. Federal Bureau of Investigation (FBI) confirmed it is investigating both incidents. In an advisory issued earlier this week, the FBI said at least seven states had reported incidents, but only Minnesota and Michigan have been specifically identified so far.

Authorities have not identified the perpetrators. However, the attacks come after the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), and other agencies issued a warning last week that Iranian hackers were targeting water and wastewater systems and other critical infrastructure.

"The FBI is aware of the recent reports regarding the water and wastewater sector," the FBI statement said. "The FBI and interagency partners are actively engaged in protecting critical infrastructure, and we remain fully capable of combating cyber threats of all types."

Dale George, communications director for the Michigan Department of Environment, Great Lakes, and Energy, said "all systems continue to operate safely" following the attacks. According to him, the state received a federal cyber advisory on Tuesday about attempts to interfere with operational technology in water systems. Shortly after, the state received "a small number of reports from communities indicating activity that matched what federal agencies described."

Earlier in the week, Minnesota also reported attacks on 30 sites. The Minnesota IT agency said most of the confirmed attacks involved technology that water systems use to remotely monitor and control equipment. The agency also stressed that affected systems did not necessarily cause water supply disruptions, noting that as of Thursday, there were no requests for residents to adjust water usage, although some requests were made earlier in the week.

Local water plants are often more vulnerable than other infrastructure due to outdated cybersecurity systems. Federal law enforcement has previously prosecuted Iranian hackers for allegedly targeting water infrastructure.

U.S. President Donald Trump, when asked about the attacks in Minnesota on Friday, deflected by criticizing Minnesota's Democratic-led state government. "I think Minnesota is behind this," Trump said without providing evidence or further clarification. "I don't think there's a cyberattack from Iran."

Meanwhile, Minnesota Governor Tim Walz expressed confidence that Iran was behind the attack. He also criticized Trump's cuts to federal government workers, which he said make the U.S. more vulnerable to cyberattacks. "Trump knows exactly who is responsible for this attack and knows that other states have also been attacked," Walz said.