Water Systems in 12 States Targeted in Cyberattack

Water systems in at least 12 states were targeted in cyberattacks last week that US officials suspect may be linked to Iran-backed hackers.

The Details: Targeted states include Michigan, Georgia, New Jersey, South Dakota and Minnesota, where more than 30 community water systems were impacted, according to CBS News (Lean Left bias). Hackers reportedly gained remote access to pumps, valves, water pressure and water treatment machinery. Officials said that drinking water was unaffected and utilities reportedly regained control of their systems quickly. The water agencies were reportedly advised to disconnect their operating programs from the internet and strengthen their password protections and firewalls. It has not been confirmed if Iran was behind the attacks or not.

For Context: There are about 170,000 public drinking water and wastewater systems in the US, many of which are connected to the internet so workers can remotely monitor the facilities.

How Did This Happen?: Outlets across the political spectrum said the aging and outdated state of US water infrastructure made it susceptible to attack. CBS News cited cybersecurity experts who said the incidents "expose longstanding weaknesses" in public water systems that "rely on poorly secured, internet-connected industrial computers." Fox News (Right) reported that many water systems use older technology and that utilities "must stretch limited budgets across essential repairs and regulatory requirements." The Hill (Center) quoted a Georgia professor who said the attacks were about "targeting the low-hanging fruit." 

'A Long Time Coming': Several outlets said the attacks come amid years of warnings that US water infrastructure was vulnerable. Fox News cited a warning from the Cybersecurity and Infrastructure Security Agency in April that Iranian-affiliated hackers were targeting devices that help control equipment used in critical infrastructure facilities. The New York Times (Lean Left) attributed the lack of cybersecurity protection to Republican legislation after former President Biden left office. An opinion writer for The Bulwark (Left) said the attacks represent "the kind of threat that American strategists and analysts have anticipated for more than two decades."

Not Prepared for the Future: An opinion writer in The Free Press (Lean Right) outlined a worst-case scenario where multiple critical US infrastructure facilities were targeted in the future. The writer argued that it's "unclear if we got lucky or if this was merely a warning shot by Iran." They also said vulnerabilities in US water may be due to the "vastness of the water-supply system," which the writer argued has been long-ignored by lawmakers and the EPA. The Bulwark opinion writer argued the problem of protecting US infrastructure isn't recognizing the danger, but "sustaining the political will, institutional continuity, and long-term investment necessary to build resilience before a crisis forces our attention."

Ahead of Midterms: Some outlets noted the attacks come as the US heads into midterm elections. The Bulwark opinion piece noted President Trump's accusation that the attacks were done by Democrats within the affected states, while Politico (Lean Left) cited Trump suggesting Minnesota Gov. Tim Walz was to blame. OANN (Right) also noted the argument between Trump and Walz, including Walz's criticism of how the federal government handles critical infrastructure protection.

Written by the AllSides staff (of humans). Learn more. Support our mission. Suggest an improvement to this summary.