Iranian Hackers Target U.S. Critical Infrastructure as Cyber Threats Escalate

Iranian-linked hackers are targeting critical infrastructure across the United States as the conflict between Washington and Tehran intensifies, according to Coin Bureau, with recent attempts involving water systems, energy infrastructure, telecommunications networks and internet-connected industrial systems.

The latest attempts have so far been unsuccessful, but the activity comes amid a broader wave of cyber incidents affecting U.S. utilities. Coin Bureau reported that hackers targeted internet-exposed systems at more than 100 U.S. water and wastewater entities in July alone.

FBI Investigates Attacks Across Seven States

The Federal Bureau of Investigation is investigating cyberattacks against municipal water systems across at least seven states. More than 30 facilities in Minnesota were among those targeted during the campaign.

U.S. authorities have warned that internet-connected operational technology used by water utilities has become an increasingly exposed attack surface. The Cybersecurity and Infrastructure Security Agency has previously urged operators to remove publicly accessible programmable logic controllers and other operational technology from the internet where possible.

The Minnesota incidents have drawn particular attention because they affected more than 30 community water systems. Reuters financial reported that Minnesota officials described the activity as a coordinated cyberattack, while the FBI said water and wastewater utilities in at least seven states had reported incidents.

Iran-Linked Activity Raises Critical Infrastructure Concerns

The latest developments build on a longer history of Iranian-linked cyber activity against industrial control systems. CISA and other U.S. agencies have previously warned about Iran-linked actors targeting programmable logic controllers used in water, wastewater, energy and other critical infrastructure sectors.

U.S. intelligence agencies have assessed that Iran was likely responsible for coordinated attacks against more than 30 Minnesota municipal water systems, although attribution remained under investigation. The FBI has continued working with affected utilities and other agencies to assess the incidents.

Coin Bureau also reported that an Iranian cyber channel warned on Sunday that U.S. energy, water and telecommunications infrastructure would be targeted after its warnings to halt attacks on Iran were allegedly ignored.

The broader implications extend beyond individual utilities. Many local water systems operate internet-connected equipment and legacy operational technology, creating vulnerabilities that can be difficult to secure consistently. Recent incidents have therefore increased pressure on infrastructure operators to reduce direct internet exposure and strengthen cybersecurity controls.

For U.S. infrastructure providers, the immediate markets priority is determining whether the latest unsuccessful intrusions represent isolated attempts or part of a sustained campaign targeting interconnected industrial systems.

Writer: Victoria Hale
Technology & Blockchain Writer

Victoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.

She prioritises clarity and accuracy when explaining technical developments to a general audience.