Iranian Hackers Infiltrate Water Facilities in 12 States as $300 Million Senate Bill Seeks Standards
Updated
Updated · Slate · Aug 19
Iranian Hackers Infiltrate Water Facilities in 12 States as $300 Million Senate Bill Seeks Standards
3 articles · Updated · Slate · Aug 19
Summary
At least 12 states saw municipal water facilities infiltrated in late July, with many systems forced offline and some issuing boil-water advisories after pressure drops, though no contaminated water was reported.
The campaign is widely attributed to Iran-linked CyberAv3ngers, which previously breached a Pennsylvania utility in 2023 using default passwords—basic weaknesses experts say many water systems still have not fixed.
Roughly 148,000 fragmented U.S. water systems, many small and under-resourced, make the sector hard to defend; even larger systems in Plymouth, Minnesota, and Clayton County, Georgia, were hit.
Democratic Sens. Adam Schiff and Amy Klobuchar responded with the Water Cyber Shield Act of 2026, which would give the EPA enforcement authority and authorize $300 million a year for upgrades.
The push faces legal and political hurdles after a court blocked earlier EPA cybersecurity oversight and a House alternative remains stalled, leaving states and private efforts to fill the gap.