On Saturday, Michigan reported cyberattacks targeting nine of the state's water systems, confirming they were operating safely despite the incidents. This news follows similar reports from Minnesota earlier in the week, where over 30 water systems were also targeted in cyberattacks linked to Iranian hackers.
The origin of these attacks is currently under investigation. In Michigan, the state received a federal cyber alert on Tuesday regarding potential tampering attempts with the operational technology at water systems. Subsequently, a small number of reports from local communities indicated activity consistent with federal warnings, leading to the acknowledgment that nine systems were affected. Dale George, the director of communications at Michigan's Department of Environment, Great Lakes, and Energy, stated, “All systems continued to operate safely, issues were addressed by local operators, and there are no known impacts that posed a public health concern.”
The FBI is actively investigating the situation but has not publicly identified any suspects. A spokesperson for the bureau declined to comment on potential responsible parties. Last week, the FBI, alongside the Cybersecurity and Infrastructure Security Agency, issued warnings that Iranian hackers were targeting water and wastewater systems as a part of their broader focus on critical infrastructure sectors.
The FBI acknowledged the recent developments concerning water and wastewater sectors, emphasizing their commitment to protecting critical infrastructure against cyber threats. The rise of digital warfare has become a stark reality in military conflicts, and local water plants typically lack the resources and expertise to implement the latest cybersecurity measures, making them attractive targets for cybercriminals. Historical trends show that these facilities are often vulnerable not only because of the relative ease of breach but also due to the potential for widespread panic induced by service disruptions.
Iran's focus on U.S. water systems is long-standing. In 2016, the Justice Department charged a group of Iranian hackers linked to a cyberattack on a small dam near New York City. Responding to the recent attacks in Minnesota, the state's IT Services department reported that as of Thursday, there were no active advisories for Minnesota communities urging residents to change their drinking water usage. Most confirmed breaches in Minnesota involved technology used to remotely monitor and control water system equipment. It is crucial to note that being impacted by these activities did not necessarily mean that water services were disrupted.
In one instance, the city of Braham, with a population of approximately 1,700 located about 70 miles north of Minneapolis, temporarily advised residents to minimize water usage while they assessed the reason behind their water treatment plant's downtime. Although the outage was attributed to a cyberattack, it had no adverse effect on water quality. The attackers reportedly managed to shut down the operational controls governing the well and treatment plant, leaving the city reliant on the limited water stored in its water tower.
Similarly, in Plymouth, a larger city with around 80,000 residents located outside Minneapolis, officials announced via social media that their water infrastructure communications had been restored by Tuesday afternoon following a cyberattack.
Controversy arose during a Cabinet meeting at President Donald Trump's Camp David retreat, where he insinuated without evidence that the cyberattacks in Minnesota were the fault of the state and Democratic Governor Tim Walz. In response, Walz emphasized on social media that Trump was aware of the true culprits behind the attacks, stating, “He knows exactly who is responsible for this attack and knows that other states were hit too.”
