Report: Utah among 12 states whose water infrastructure was targeted by Iran At least a dozen states have recently reported incidents of “mali...
Published by Water Network Research, Official research team of The Water Network
Report: Utah among 12 states whose water infrastructure was targeted by Iran
At least a dozen states have recently reported incidents of “malicious” cybersecurity attacks on water and wastewater infrastructure, and Utah is one of them.
The FBI and EPA issued a public announcement concerning malicious cyber actors “remotely tamper(ing) with device configurations,” resulting in “a loss of monitoring and control functionality.”
An intelligence note reviewed by ABC News said public safety officials in Utah “identified targeted reconnaissance” against the state’s water infrastructure using an internet signature linked to Iran, including nearly 500 attempted intrusions within 46 minutes in November 2025.
The Utah Cybersecurity Commission, Utah Cyber Center and Utah Department of Public Safety did not respond to multiple requests for comment on reports of the attack.
Growing risk of cyberattacks
Federal agencies have been warning of cyberattacks on critical water infrastructure for years, and the repeated attacks in recent weeks illustrate a growing threat.
“Cybersecurity threats are a serious concern for our nation’s drinking water and wastewater systems, and these threats pose a legitimate risk to the communities, businesses, hospitals, schools, and other critical sectors that rely on these lifeline services,” said EPA Assistant Administrator for Water Jess Kramer in a press release.
This is not the first time U.S. critical water systems have been targeted by cybersecurity threats, and the compromise of critical water systems could have serious consequences.
At the same time cybersecurity attacks are becoming an increasing threat, data shows that Utah water systems are “vulnerable” to attack.
Audit reveals Utah drinking water systems ‘lack foundational protections’ against cyber threats
At least a dozen states have recently reported incidents of “malicious” cybersecurity attacks on water and wastewater infrastructure, and Utah is one of them.
The FBI and EPA issued a public announcement concerning malicious cyber actors “remotely tamper(ing) with device configurations,” resulting in “a loss of monitoring and control functionality.”
An intelligence note reviewed by ABC News said public safety officials in Utah “identified targeted reconnaissance” against the state’s water infrastructure using an internet signature linked to Iran, including nearly 500 attempted intrusions within 46 minutes in November 2025.
The Utah Cybersecurity Commission, Utah Cyber Center and Utah Department of Public Safety did not respond to multiple requests for comment on reports of the attack.
Growing risk of cyberattacks
Federal agencies have been warning of cyberattacks on critical water infrastructure for years, and the repeated attacks in recent weeks illustrate a growing threat.
“Cybersecurity threats are a serious concern for our nation’s drinking water and wastewater systems, and these threats pose a legitimate risk to the communities, businesses, hospitals, schools, and other critical sectors that rely on these lifeline services,” said EPA Assistant Administrator for Water Jess Kramer in a press release.
This is not the first time U.S. critical water systems have been targeted by cybersecurity threats, and the compromise of critical water systems could have serious consequences.
At the same time cybersecurity attacks are becoming an increasing threat, data shows that Utah water systems are “vulnerable” to attack.
Audit reveals Utah drinking water systems ‘lack foundational protections’ against cyber threats
Tags
- Drinking Water
- Water Systems Monitoring
- Urban Water Infrastructure
- Water Treatment Systems
- Critical Infrastructure Protection
- Utah, United States
- Water and Wastewater