Multiple US water systems came under attack last week, with Minnesota reporting that more than 30 of its state water utilities faced a coordinated cyber-assault. Days later, the Federal Bureau of Investigation announced that attacks had been documented across seven states, with some operations resulting in degraded water service. The US Cybersecurity and Infrastructure Security Agency is reportedly investigating whether Iran may have been responsible for the Minnesota incidents, though the agency declined to provide official comment on its investigation.
Cyber security experts consulted by the BBC identified Iran as a likely source of the attacks, citing both its technical capabilities and current tensions with the United States. Morgan Wright, a former state department anti-terror adviser, stated that cyber-attacks of this nature are typically attributed to either North Korea or Iran, with Iran rising to the top of suspects given existing geopolitical conflict. However, some analysts noted the possibility that attackers could have attempted to masquerade as Iran-based operatives to create additional discord. Jake Braun, former acting White House Deputy National Cyber Director, suggested the Trump administration might be reluctant to acknowledge Iranian infiltration of US water infrastructure given its involvement in information warfare with Iran.
Iran has not commented on the recent incidents but has maintained a pattern of denying involvement in previous cyber operations attributed to it by the United States. These previously alleged Iranian cyber-campaigns have targeted banks, dams, hospitals, water systems, and private companies over the past decade. Security analysts noted that Iran-affiliated groups operating outside the country could conduct attacks, creating layers of plausible deniability. A group called Handala, which the US Justice Department has linked to Iran’s Ministry of Intelligence and Security, has claimed responsibility for multiple cyber-attacks against American and Israeli targets during the current year, including a mid-June breach of a California water facility.
Experts emphasized that the primary threat posed by such attacks extends beyond direct damage to water infrastructure itself. The incidents may significantly erode public confidence in government’s ability to maintain essential services during a period of national division. The US water system remains particularly vulnerable due to aging infrastructure and older technology at many of the nation’s 152,000 public drinking water systems and over 16,000 wastewater treatment facilities. The Cybersecurity and Infrastructure Security Agency and Environmental Protection Agency have jointly characterized cyber-attacks on water utilities as a serious national security concern and have recommended immediate security upgrades, including disconnecting systems from the internet and resetting passwords.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI