Why Are US Water Treatment Plants Still Connected to the Internet?
Since February 2026, dozens of US water treatment plants have faced cyberattacks, likely tied to Iran. CISA warns that programmable logic controllers (PLCs) are being tampered with to change passwords and IP addresses, disrupting water pressure.
- CISA has tracked PLC attacks on water plants since April 2026
- Minnesota saw at least 36 attacks on municipal water systems over the summer
- Attacks in Georgia disrupted water pressure at Clayton County Water Authority
- PLCs are made by Rockwell Automation, Schneider Electric and Siemens
Read next
Security