Michigan joins Minnesota in reporting cyberattacks, with FBI investigating

Water systems across two U.S. states have experienced coordinated cyberattacks, prompting federal investigation and public concern about critical infrastructure vulnerability. Michigan's Department of Environment, Great Lakes and Energy confirmed that nine communities reported suspicious activity consistent with federal alerts issued earlier in the week. Minnesota reported a broader impact, with approximately 30 sites experiencing similar incidents. According to state officials, the compromised systems primarily involved remote monitoring and control technology rather than direct water supply disruption, and no active public health advisories requiring usage modifications remained in effect as of the latest reports.

Federal law enforcement agencies, including the FBI and the Cybersecurity and Infrastructure Security Agency, initiated investigations after issuing warnings about potential Iranian-sponsored targeting of water and wastewater infrastructure. The advisory noted that at least seven states had reported incidents, though only Minnesota and Michigan had been publicly identified at the time of reporting. Officials emphasized that affected systems continued operating safely and that the breaches did not necessarily translate to service interruptions for residents.

Water infrastructure remains a recognized vulnerability in the nation's critical systems, partly because many facilities operate with outdated cybersecurity measures. Federal authorities have previously pursued cases against Iranian actors accused of targeting similar infrastructure. While the investigation continues, no definitive attribution has been made, and officials have not confirmed the source of the attacks.