Anchor
Iran-linked hackers probe US drinking-water systems in multi-state wave
Force in PlayMichigan and Minnesota lead a string of states reporting intrusions into internet-connected water controls during the 2026 US-Iran conflict
5 days ago: Count reaches at least 12 statesNew here? Follow stories to track developments over time. Create a free account to get updates when stories you care about change.
Overview
The tap water still runs clean in Lansing, Michigan. But the machines that keep it that way were being poked at by hackers. On August 1, Michigan officials said nine municipal water systems, including the Lansing Board of Water and Light, had been targeted in coordinated cyberattacks that US intelligence ties to Iran.
The Michigan disclosure came a day after Minnesota reported more than 30 similar intrusions. Within a week the count grew to at least a dozen states. Attackers went after the internet-connected controllers that run pumps, valves, and water pressure. No one has been sickened and no service has stopped, but the FBI now treats the campaign as state-linked pressure on US infrastructure during an active conflict with Iran.
Why it matters
If a foreign government can reach the controls behind your tap, the line between a distant war and your kitchen sink gets thin.
Questions about this story
No questions yet — be the first to ask.
Key Indicators
9
Michigan water systems targeted
Includes the Lansing Board of Water and Light, disclosed August 1.
30+
Minnesota systems hit days earlier
Cities including Plymouth, South St. Paul, Maple Plain, and Braham confirmed intrusions.
12
States reporting attacks
By early August the FBI was probing incidents across at least a dozen states.
0
Confirmed drinking-water impacts
Officials say water has stayed safe, though some utilities lost remote monitoring.
Voices
Curated perspectives — historical figures and your fellow readers.
Play
Exploring all sides of a story is often best achieved with Play.
Most of these play right now — no account needed. Sign up to save scores, keep a streak, and unlock Debate and Predict.
Log in
Sign Up
Higher or Lower
A number from this story, against one from elsewhere in the news — guess which is bigger, then keep the chain going. 5 rounds, 3 strikes; a miss costs a strike and resets your streak.
Example
Anchor
EU tariff revenue
$52B
Big for this kind of number
Mystery
Pentagon AI contract
?
Round 1
Streak: 0
Mystery
?
Keyboard: ↓/L lower · ↑/H higher
0 pts
Best streak: 0 · Rounds: 0
0 points — sign up to put that on the leaderboard.
Now try on this story
Timeline
Iran-linked hackers probe US drinking-water systems in multi-state wave
Order five events from this story, oldest at top. Each in the right slot scores 1 — neighbours within one slot count too. Your previous result — green ✓ for exact slots, yellow ~ for off by one. Cards now in true chronological order.
Loading puzzle…
Tap 💡 Free hint to lock the oldest into slot 1 — that leaves just four to order. Type pills are clues.
0/5
Exact slot
0/5
Within 1
Sign up to save your score and track a streak across stories.
Now try on this story
Connections
Sixteen names from the news. Find the four hidden groups of four. Four mistakes max.
Loading today's puzzle…
0/4 groups
Mistakes
Sign up to keep a daily streak — a new puzzle lands every day.
Now try on this story
Exit debate?
Your progress in this debate will be lost.
How it works
- 1 Two AI personas square off on this story.
- 2 You predict who'll win each round — correct picks earn XP.
- 3 One crossfire question is yours to fire. Pick it carefully.
Couldn't generate a topic
Select Your Champions
Choose one persona for each side of the debate
DEBATE TOPIC
Choose personas with different perspectives for a more dynamic debate.
SIDE A (PRO)
Select debater for this side:
No debate personas available right now.
SIDE B (CON)
Select debater for this side:
No debate personas available right now.
VS
Get ready to make your prediction...
Round of
Claim
Evidence
Stakes
Crossfire Answer
Closing Statement
Claim
Evidence
Stakes
Crossfire Answer
Closing Statement
Your Crossfire Question
Generating arguments...
Who's Got This Round?
Make your prediction before the referee scores
The referee scores both sides on
Correct predictions earn +20 XP
· Press 1 or 2 to pick
Evidence
40%
Logic
30%
Detail
20%
Style
10%
Round Results
Your Pick
Not this time
(%)
Overall Score
/10
Your Pick
Not this time
(%)
Overall Score
/10
Set the Crossfire
Pick the question both personas must answer in the final round
Crafting crossfire questions...
Choosing a question earns +10 XP crossfire bonus
🏆
Total XP Earned
Cred Change
Predictions
Debate Oracle! You called every round!
Sharp Instincts! You know your debaters!
The Coin Flip Strategist! Perfectly balanced!
The Contrarian! Bold predictions!
Inverse Genius! Try betting the opposite next time!
XP Breakdown
Base completion
+20 XP
Rounds played ( rounds x 5 XP)
+ XP
Correct predictions ( correct x 20 XP)
+ XP
Crossfire bonus
+10 XP
Accuracy
%
Prediction History
Round
You picked:
✓
✗
Now try on this story
Keep debating to level up your credibility and unlock achievements
People Involved
Organizations Involved
CY
CyberAv3ngers (IRGC-CEC)
State-linked hacking group
Leading suspect in the 2026 water intrusions
An Iran-linked hacking persona that specializes in breaking into the industrial controllers behind water and energy systems.
Federal Bureau of Investigation (FBI)
Federal law-enforcement agency
Lead investigator across affected states
The FBI is coordinating the multi-state investigation into who breached the water controllers and why.
Cybersecurity and Infrastructure Security Agency (CISA)
Federal cybersecurity agency
Issued and updated the controlling threat advisory
CISA is the federal agency that warns critical-infrastructure operators about active cyber threats and how to blunt them.
LB
Lansing Board of Water and Light
Municipal utility
Reported an uptick in intrusion attempts
A publicly owned Michigan utility named among the nine systems targeted in the state.
Timeline
April 2026 August 2026
7 events
Latest: 5 days ago
Tap a bar to jump to that date
-
Count reaches at least 12 states
Latest InvestigationThe FBI is now probing suspected Iran-linked water intrusions across at least a dozen states, including New Jersey and South Dakota.
-
Georgia and others join the list
IncidentGeorgia and additional states report intrusions, with some activity degrading water operations and forcing manual control.
-
Michigan reports nine systems hit
IncidentMichigan discloses nine targeted water systems, including the Lansing Board of Water and Light. The FBI says at least seven states were probed.
-
Investigators point to Iran
InvestigationA preliminary US assessment concludes Iranian hackers were probably behind the Minnesota intrusions. The FBI warns utilities nationwide.
-
Minnesota water systems breached
IncidentMore than 30 Minnesota municipal water systems are hit in a coordinated intrusion targeting remote monitoring and control devices.
-
Advisory widened to more hardware
WarningCISA updates AA26-097A, expanding the named targets from Rockwell Automation to Schneider Electric and Siemens controllers.
-
CISA warns of Iranian controller attacks
WarningCISA publishes advisory AA26-097A on Iranian-affiliated actors exploiting internet-connected controllers across US critical infrastructure.
Historical Context
3 moments from history that rhyme with this story — and how they unfolded.
November 2023
Aliquippa water authority hack (2023)
The CyberAv3ngers group breached Israeli-made Unitronics controllers at the Municipal Water Authority of Aliquippa, Pennsylvania, and other US sites. The screens showed an anti-Israel message. Operators switched a booster station to manual control while they responded.
Then
No water quality was affected, but the breach prompted federal warnings to hundreds of utilities using the same devices.
Now
It established water controllers as a favored target for Iran-linked hackers and set the template for the 2026 wave.
Why this matters now
The same group and the same class of exposed controllers are at the center of the 2026 campaign, now on a far larger scale.
February 2021
Oldsmar water plant intrusion (2021)
An intruder gained remote access to a water treatment plant in Oldsmar, Florida, and briefly raised the setting for sodium hydroxide to a dangerous level. A plant operator watching the screen reversed it within minutes.
Then
No contaminated water reached the public, and the case became a national example of how thin the safety margin can be.
Now
It drove new federal attention to remote-access security at small water utilities that often lack dedicated cyber staff.
Why this matters now
It shows the worst-case path the 2026 intrusions have not taken: a hacker reaching the chemistry that keeps water safe.
December 2015
Ukraine power grid attack (2015)
Hackers linked to Russia cut power to roughly 230,000 people in western Ukraine by seizing control of grid operators' systems. Operators watched cursors move on their own screens and had to restore power by hand.
Then
Electricity returned within hours, but it was the first confirmed cyberattack to take down a power grid.
Now
It proved a state could use code to cause physical infrastructure failure, reshaping how governments defend utilities.
Why this matters now
It is the benchmark for what state-linked intruders can do once they move from probing controls to operating them.
Sources
(8)Related Stories
China's silent invasion: hackers embedded in America's critical infrastructure
Force in Play
Updated May 16
US-Iran war escalates to water infrastructure across the Gulf
Force in Play
Updated May 30
Iran extends war to US corporate targets across the Gulf
Force in Play
Updated May 30
U.S. takes a Ukrainian hacker to court over Russia-backed attacks on water and food systems
Rule Changes
Updated May 10
Chinese hackers breach FBI's own surveillance network
Force in Play
Updated May 30
Iran's 2026 war widens from Hormuz to the Caspian Sea
Force in Play
Updated Jul 26