Malicious Cyber Activity Targeting US Water Utilities: What Operators Need To Know

Executive summary: Multiple coordinated cyberattacks since late July 2026 have targeted internet-exposed programmable logic controllers (MicroLogix 1100/1400 and other vendors) in U.S. water systems, causing configuration changes, loss of monitoring/control, and operational effects such as pressure loss and flooding; federal agencies (FBI, EPA, CISA) have issued advisories and guidance to remove controllers from the public internet, check AA26-097A indicators, and strengthen access controls and backups.