Michigan has become the second state to report significant cyberattacks targeting its water infrastructure, with nine water systems experiencing breaches. This follows similar incidents reported in Minnesota earlier in the week, affecting 30 sites across the state. The United States Federal Bureau of Investigation (FBI) confirmed on Saturday that it is actively investigating both sets of attacks.

These cybersecurity incidents occur amidst broader warnings from federal agencies about potential threats to critical infrastructure. An advisory issued last week by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), and other partners alerted states to a possible Iranian plot targeting water and wastewater systems, as well as operational controls in other essential sectors.

While no specific culprit has been identified in any of the attacks, the timing is notable. Dale George, director of communications for Michigan’s Department of Environment, Great Lakes and Energy, stated that all affected systems continued to operate safely. Michigan received a federal cyber alert on Tuesday detailing attempts to tamper with water system operational technology, and shortly thereafter, received reports from communities consistent with the federal description.

Minnesota IT Services reported that most of the confirmed attacks involved the remote monitoring and control technology used by water systems. The agency clarified that these breaches did not necessarily lead to water service disruptions, and as of Thursday, there were no widespread requests for residents to alter their water usage, though some localized modifications had been advised earlier in the week.

The FBI acknowledged the reports, stating its commitment to protecting critical infrastructure. "The FBI and our interagency partners are fully engaged to protect critical infrastructure, and we remain well-equipped to protect against cyber threats of all varieties," the agency said in a statement. The investigation aims to identify the perpetrators and prevent further intrusions.

Experts note that local water plants are often more vulnerable to cyberattacks due to potentially outdated cybersecurity measures compared to other critical infrastructure sectors. This vulnerability can make them an attractive target for malicious actors.

Federal law enforcement has a history of indicting Iranian hackers for alleged attacks on water infrastructure. The current investigations will likely examine any potential links to state-sponsored cyber activity, given the federal advisory.

Broader geopolitical tensions have also been cited in relation to cyber threats. US President Donald Trump has previously issued threats concerning Iranian civilian infrastructure. When questioned about the Minnesota attacks, Trump reportedly pivoted to criticizing Democratic policies, without directly addressing the cyber incidents or potential Iranian involvement.