Water System Cyberattacks Hit at Least Seven States

Utilities in at least seven states have reported cyber intrusions into water treatment and distribution systems to the FBI, a cluster large enough to suggest coordinated probing rather than opportunistic crime. Small municipal water districts are among the softest targets in American critical infrastructure: they run internet-exposed industrial controllers with default credentials and often have no dedicated IT staff. Federal officials have not publicly attributed the activity.