A coordinated series of cyberattacks has impacted water and wastewater utilities across at least 12 states, according to recent reports. The incidents involve hackers gaining access to the industrial control systems responsible for managing critical infrastructure, including water pressure, pumps, and valves. While the FBI initially reported that seven states were affected last week, that number has since risen to 12.

These attacks represent one of the most significant and widespread campaigns against U.S. municipal water systems to date. Cybersecurity experts and federal officials have long warned that many local utilities remain vulnerable due to outdated or poorly secured digital infrastructure. The ability of external actors to manipulate the physical components of water plants—such as valves and pressure settings—has raised urgent concerns regarding public safety and the reliability of essential services.

While the specific identity of the hackers remains a subject of ongoing investigation, the breadth of the campaign suggests a coordinated effort rather than isolated incidents. The reports highlight a growing trend of critical infrastructure becoming a primary target for cyber warfare. Authorities are currently working with affected municipalities to secure their systems and prevent further unauthorized access, though the full extent of the potential damage to water quality or service delivery is still being assessed by local and federal agencies.