Water System Cyberattacks Hit 12 States; Expats Should Know What to Do
Hackers have targeted water and wastewater systems in at least 12 US states in a coordinated campaign that may have originated from Iran. While water remains safe to drink, some systems require manual operation and boil-water notices.
What Happened
Hackers have targeted water and wastewater utilities in at least 12 states as of early August 2026, marking one of the broadest known coordinated cyber campaigns against U.S. municipal water systems to date. The attack began after hackers targeted more than 30 municipal water facilities in Minnesota, with hallmarks of Iranian meddling, followed by attacks spreading to Michigan water systems.
After remotely accessing internet-facing devices, the actors changed IP addresses and passwords, resulting in a loss of monitoring and control functionality. This activity resulted in boil-water notices and sustained manual operations. However, officials stressed there was no indication the breaches contaminated any municipal water supplies.
What You Should Do
- Check local water authority alerts: If you're settling in Minnesota, Michigan, or other affected states, visit your city's water utility website for any boil-water notices or advisories before drinking tap water.
- Don't panic about safety: While operations are degraded, authorities confirm water quality remains uncompromised in all reported cases.
- Be aware of future disruptions: Some water systems may experience temporary manual operations or service interruptions as they rebuild cybersecurity defenses.
As a foreigner setting up utilities and services in the US, stay informed about local infrastructure alerts. This is a reminder that while American utilities are generally reliable, having backup water supplies (bottled water) during manual operation periods is prudent, especially if you live in a state that has experienced attacks.
Sources
MyHAbroad is an independent app and is not affiliated with, endorsed by, or representing any government or public authority. This is general information only — not legal, tax, medical, or financial advice. Always verify with the official source before acting:
