U.S. probing if Iran was behind cyberattack on water systems in 7 states

Core Impact Points

• The cyberattack targeted programmable logic controllers (PLCs) used to remotely monitor and control water system equipment.
• Iran-linked hackers have previously targeted US water utilities, and federal agencies have confirmed that actors affiliated with Iran's Islamic Revolutionary Guard Corps used a similar playbook in 2023.
• The attack did not compromise any water supply, but it highlights the vulnerability of critical infrastructure to cyber threats.
• The FBI and CISA are urging critical infrastructure owners and operators to remove publicly exposed PLCs and other operational technology from the internet as soon as possible.
• Minnesota officials have identified similarities in the timing of the recent incidents, but have not yet confirmed that every incident was carried out by the same actor.
• The incident is a reminder of the importance of cybersecurity measures in protecting critical infrastructure and preventing potential disruptions to essential services.