Multiple states report cyberattacks on water infrastructure
As of Aug. 6, 2026, at least a dozen states have experienced cyberattacks in their public water systems.
The states with reported breaches include Georgia, Michigan, Minnesota, New Jersey and South Dakota. According to the Cybersecurity & Infrastructure Security Agency, the cyberattacks are targeting programmable logic controllers, which turn industrial equipment on and off and control factors such as water pressure or chemicals added in treatment plants. In a statement released by the FBI on July 30, 2026, targeted water utilities have experienced pressure loss and flooding, but have quickly regained control of their systems.
“We’re lucky that it wasn’t worse, but part of that luck is because we have good public utility workers,” said Michael Garcia, policy director of the Operational Technology Cybersecurity Coalition.
