Someone Is Probing America's Drinking Water — And the Defense Is a Patchwork of Small-Town Utilities
The federal government's top cyber defense agency just told water utilities across the country to do something drastic: pull their industrial control systems off the internet entirely, as soon as possible. That's not routine advice — it's what you say when attackers are actively finding and hitting exposed systems. Incidents first flagged in Minnesota have now reportedly spread to Michigan, with at least five other states targeted, according to New York Times reporting cited by one source.
Bottom Line
THE BOTTOM LINE: An active, spreading campaign against US water systems has prompted an unusually urgent federal warning, with Iran suspected but not confirmed as the actor. The deeper vulnerability isn't just exposed control systems — it's a defense model that depends on thousands of local utilities acting fast, at the exact moment federal-state trust is being publicly strained. Whether utilities pull their systems offline in days or months will determine how this plays out.