According to several sources, more than ten US states have reported suspected cyber intrusions at water supply and wastewater treatment facilities. Sources indicate that Iran is considered the primary suspect behind these cyberattacks. Attackers can tamper with passwords and disable alarm systems, depriving water utility operators of monitoring capabilities, though US authorities have not officially confirmed Iranian involvement.
To date, no widespread water supply disruptions or wastewater system failures have occurred. The Federal Bureau of Investigation (FBI) is urging water agencies to disconnect control systems from the internet where possible, equip devices with circuit-breaking protection, and familiarize themselves with emergency response plans to switch to manual control if automated systems are compromised.
Michigan is among the affected regions, with state police saying they are continuously monitoring the situation and coordinating with federal agencies. The Michigan State Police stated they are working with the Department of Environment, Great Lakes, and Energy to communicate with municipal water utilities across the state, urging facilities using the affected software to reinforce their systems and implement cybersecurity guidelines.
Citing information from the Department of Environment, Great Lakes, and Energy, Michigan State Police noted, "All facilities remain safe and operational; local operators have addressed various issues, and there are no related public health risks at this time." The Michigan State Police pointed out that the investigation is led by the FBI, directing all inquiries to the federal agency.