Michigan on Saturday joined Minnesota in reporting cyberattacks on nine of the state’s water systems but an official said all systems were operating “safely.”
Earlier this week, authorities said cyberattacks targeted over 30 water systems in Minnesota. The source of the attacks is being investigated, but they came amid warnings that Iranian hackers have been focused on such systems.
The reports in Michigan surfaced after the state received a federal cyber alert Tuesday about attempts to tamper with operational technology at water systems.
Soon after, the state received “a small number of reports from Michigan communities indicating activity consistent with what federal agencies described,” said Dale George, the director of communications at the state’s Department of Environment, Great Lakes, and Energy. He later said nine systems were impacted.
“All systems continued to operate safely, issues were addressed by local operators, and there are no known impacts that posed a public health concern,” George said in an statement.
The FBI, which is investigating, has not publicly identified a culprit and a spokesperson declined to say Thursday who the bureau thought might be responsible. The FBI, Cybersecurity and Infrastructure Security Agency and other agencies warned in an advisory last week that Iranian hackers have been targeting water and wastewater systems and the operational controls of other critical infrastructure sectors.
“The FBI is aware of recent public reporting around Water and Wastewater (WWS) sectors,” the agency said in a statement Saturday. ”The FBI and our interagency partners are fully engaged to protect critical infrastructure and we remain well-equipped to protect against cyber threats of all varieties.”
Massachusetts officials say The Commonwealth Fusion Center is actively tracking the matter and remains in close coordination with local, state, and federal partners.
At this time, there are no credible threats to Massachusetts.
The town of Littleton became the unexpected target of a sophisticated cyber-espionage attack in 2023, with China gaining access to its utility computer network.
"LELWD has long prioritized cybersecurity as a core operational responsibility. We maintain continuous monitoring and management of both our IT and operational technology (OT) systems to defend against evolving threats and threat actors. This includes close attention to recent cyber incidents reported in Minnesota and similar events affecting critical infrastructure," said Nick Lawler, general manager of LELWD.
"To strengthen our posture, we partner with specialized firms including Dragos, GML Utility Services, and EvoLab Technology Solutions. These relationships provide advanced threat intelligence, detection capabilities, and response support tailored to the unique needs of electric and water utilities. We remain committed to protecting the reliability and security of the systems that serve our community"
Digital warfare has become ingrained in military conflict, and local water plants or healthcare facilities often lack the funds and know-how to install the latest software patches or take other security steps. That has made them a favorite target, both because of the relative ease of penetrating them and because of the panic such disruptions can cause.
Iran’s interest in the operations of water systems inside the U.S. dates back years. In 2016, the Justice Department charged a group of Iranian hackers in connection with a cyberattack targeting a small dam near New York City.
Minnesota IT Services said that as of Thursday, there were no active requests from Minnesota communities for residents to modify usage of their drinking water. The state agency said most of the confirmed attacks involved technology that water systems use to remotely monitor and control equipment. It said that being impacted meant investigators confirmed there was malicious activity involving the system’s technology and didn’t mean every impacted community had their water service disrupted.
For a few hours on Monday, the city of Braham asked residents to minimize water use as they tried to determine why the water plant was offline. The city of about 1,700 people, located about 70 miles (113 kilometers) north of Minneapolis, said in a news release that the water plant outage was due to a cyberattack, but it didn’t cause any issue with water quality.
The city said the attackers shut down the operating controls that shut down the well and water treatment plant. That left the city for a time only able to provide residents with the water held in the water tower.
In Plymouth, a city of about 80,000 located outside of Minneapolis, officials said on social media that their water infrastructure communications had been restored by Tuesday afternoon following a cyberattack.
During a Cabinet meeting on Friday at the Camp David presidential retreat in Maryland, President Donald Trump claimed without evidence that recent cyberattacks in Minnesota were the fault of the state, including Democratic Gov. Tim Walz.
Waltz responded on social media, saying Trump “knows exactly who is responsible for this attack, and knows that other states were hit too.”
This is a developing story. Check back for updates as more information becomes available.
Download the FREE Boston 25 News app for breaking news alerts.
Follow Boston 25 News on Facebook and Twitter. | Watch Boston 25 News NOW