What we know about the alleged Iranian hacks on US water utilities

Core Impact Points

• The attacks have affected water treatment plants in over a dozen states, including Minnesota, Arkansas, Georgia, New Jersey, and Michigan.
• The US government has yet to officially attribute the attacks, but intelligence agencies are reportedly confident that Iran is responsible.
• The attacks have raised concerns about the vulnerability of critical infrastructure and the potential consequences of a nation-state sponsored cyberattack.
• Cybersecurity experts have long believed that Iranian hackers target low-hanging fruit in opportunistic isolated attacks, making this hacking campaign a significant escalation.
• The US has more than 150,000 water systems, some of which may not have the resources or cybersecurity expertise needed to protect themselves.
• The attacks have highlighted the need for improved cybersecurity measures and collaboration between government agencies, water utility companies, and cybersecurity experts.