FBI Investigates Cyberattacks on Nine Michigan Water Systems

Nine Michigan water systems were targeted as part of a widening series of cyberattacks against water utilities across the United States, state and federal officials have confirmed.

The attacks raised immediate concerns because they involved operational technology—the computerized equipment used to control pumps, valves and other physical components of water-treatment and distribution systems.

Michigan officials stressed, however, that the affected systems continued operating safely and that there was no known danger to the public.

“All systems continued to operate safely, issues were addressed by local operators, and there are no known impacts that posed a public health concern,” said Dale George, communications director for the Michigan Department of Environment, Great Lakes, and Energy.

Federal Warning Led Michigan Communities to Report Incidents

Michigan began receiving reports after federal authorities issued a cyber alert warning water utilities about attempts to access internet-connected industrial equipment.

A “small number” of Michigan communities initially reported suspicious activity consistent with the federal warning. State officials later confirmed that nine systems had been affected, although they did not publicly identify the communities.

The FBI said water and wastewater utilities in at least seven states had reported incidents beginning July 27. Some attacks degraded normal water operations, although federal authorities have not reported contaminated drinking water or confirmed attempts to poison public supplies. FBI cyber alert

The attacks reportedly focused on internet-facing programmable logic controllers, commonly called PLCs. These small industrial computers control physical equipment such as pumps, valves and switches. If improperly secured, they can potentially allow an outside intruder to disrupt operations without first penetrating the utility’s larger computer network.

More Than 30 Minnesota Systems Also Targeted

The Michigan incidents followed attacks against more than 30 water systems in Minnesota.

Some Minnesota communities experienced operational disruptions. In Braham, attackers reportedly disabled water-treatment operations temporarily, while Plymouth experienced a brief interruption in communications with portions of its water infrastructure.

The FBI and other federal agencies are now working to determine the full extent of the attacks and identify those responsible. Associated Press

Iranian Connection Has Not Been Confirmed

The attacks occurred amid repeated government warnings that Iranian-affiliated hackers have been targeting American critical infrastructure, including water and wastewater facilities.

In July, the Cybersecurity and Infrastructure Security Agency, FBI, Environmental Protection Agency and other government partners warned of ongoing attempts by Iranian-linked hackers to exploit internet-connected operational technology. CISA advisory

That warning has fueled speculation that Iranian hackers could be responsible for the latest attacks. Federal investigators, however, have not publicly identified a culprit, and no hacking organization has claimed responsibility.

For now, Michigan authorities maintain that the nine affected systems are operating safely. Nevertheless, the incidents reveal how something as basic and essential as a community’s water supply can become a target without an attacker ever setting foot near a treatment plant.