by Susan Duclos, All News Pipeline:
In a world where headlines are read and disseminated sometimes without those spreading them reading the entire articles, one would be forgiven for believing that just seven states suffered from cyberattacks against their water plants recently.
In reality from what I have garnered from multiple sources, some online, some confirmed media reports, and from some digging even deeper it is 7 to 12 states, and within those states, dozens of cities were hit.
For example, and this is from the Bing Co-Pilot, and that is AI informed, so it took a while to independently confirm the information, we see the following:
TRUTH LIVES on at https://sgtreport.tv/
Recent investigations show at least 7–12 U.S. states have reported cyberattacks on water and wastewater systems, with Minnesota and Michigan among the hardest hit The Hill+1. In Minnesota, 30+ water systems were targeted, including cities like Plymouth, South St. Paul, Maple Plain, and Braham, while Michigan reported nine systems affected The Hill+1. Some facilities experienced brief outages or degraded operations, but no confirmed contamination of drinking water has been reported The Hill+1.
According to the FBI website in a public release dated July 30, 2026, we see how the attacks occurred:
The Federal Bureau of Investigation (FBI) and Environmental Protection Agency (EPA) are issuing this Public Service Announcement (PSA) to warn critical infrastructure asset owners and operators that malicious cyber actors (MCAs) are conducting cyber attacks targeting Operational Technology (OT) devices, including Rockwell Automation/Allen-Bradley Programmable Logic Controllers (PLCs), specifically MicroLogix 1100 and 1400 series. Since 27 July 2026, Water and Wastewater Sector (WWS) utility companies in at least seven states have reported incidents to the FBI, and some of that activity degraded water operations. While the FBI has only observed this behavior with the referenced Rockwell PLCs, similar considerations should also be made with other branded PLCs.
After remotely accessing internet-facing devices, the actors changed the IP addresses and passwords, resulting in a loss of monitoring and control functionality. To reduce the risk of compromise, the FBI and EPA recommend removing PLCs from direct internet exposure via secure gateway and firewalls, setting up strong, unique passwords, and utilizing an access control list (ACL) to allow only authorized communication between expected control system devices.
No reports, nor the FBI press release, have named all the states involved, but according to Fox News, along with Minnesota and Michigan, Wisconsin detected malicious cyber activity at water facilities, urging utilities to take immediate action, without naming individual cities involved, and Rapid City, South Dakota reported water system cyber incidents.
The FBI and EPA have confirmed at least six additional states beyond Minnesota, Michigan, and Wisconsin, but specific states and cities have not been publicly disclosed in all reports.
No media reports, nor the FBI, has said when this initially started or how long it has been going on before being uncovered.
This brought my “conspiracy” geared mind to wondering what states reported the recent cases of cyclosporiasis, a parasitic infection causing severe, often “explosive” diarrhea, which has caused at least 10,468 laboratory-confirmed cases since May 1, plus at least 12,255 more unconfirmed cases, resulting in 517 hospitalizations and two deaths so far across 47 states.
Read More @ AllNewsPipeline.com
