???? Michigan Reports Cyberattacks On Nine Municipal Water Systems: Fbi Probe Expands As Similar Breaches Disrupt Utilities Across Several States ????

Michigan has reported cyberattacks affecting nine municipal water systems, expanding a federal investigation that began after more than 30 community water systems in Minnesota were targeted during a coordinated wave of intrusions. Michigan officials said all affected systems continued operating safely, local operators addressed the problems, and no known incident created a public-health risk or compromised drinking-water quality.

The Michigan Department of Environment, Great Lakes, and Energy began receiving reports after federal authorities issued an alert on July 28, 2026, warning of attempts to tamper with operational technology used by water utilities. Department spokesperson Dale George said the reported activity was consistent with the behavior described in the federal notice. The affected Michigan communities have not been publicly identified while the investigation continues.

The FBI said water and wastewater utilities in at least seven states have reported cyber incidents, some of which degraded normal operations. In Minnesota, attacks on July 26 and July 27 affected remote monitoring and control equipment. The city of Braham temporarily lost operating controls for its well and treatment plant, leaving the community dependent on water stored in its tower until operators restored service. Plymouth also experienced a temporary communications disruption involving water infrastructure.

The FBI has not publicly identified who carried out the attacks. Federal agencies previously warned that Iranian-linked hackers were focusing on water and wastewater systems and other critical infrastructure, but investigators have not formally attributed the Michigan or Minnesota incidents to Iran or any specific organization.

The Cybersecurity and Infrastructure Security Agency urged utilities to remove vulnerable operational technology from direct internet access as quickly as possible. Officials also recommended securing remote connections, changing default passwords and ensuring that operators can switch to manual controls if digital systems fail.

Should water utilities be required to disconnect critical control equipment from the public internet when safer alternatives are available?