Thursday, 6 August 2026, 14:39
A Georgia water utility is investigating a possible cyberattack after customers experienced a drop in water pressure. The incident in Clayton County has become part of a broader federal warning about attacks on water systems across the United States.
The Clayton County Water Authority said a "temporary disruption" affected a portion of its operational systems and water service last week. The utility said it is looking into whether the disruption was caused by a cyberattack. Officials declined to speak with WXIA on Tuesday afternoon but said water service was restored within hours and remained safe.
The FBI has warned that water systems in at least seven states were targeted. CBS News, citing sources familiar with the matter, reported that at least a dozen states have reported cyberattacks on water systems. The numbers differ because federal reporting is still evolving and some states may not have publicly confirmed incidents.
Multiple sources told NBC News that Iran is likely behind a recent wave of cyberattacks on municipal water systems in several states. The claim has not been formally confirmed. CBS News described the hackers as possibly linked to Iran-backed groups.
Patrick Kelley, chief security officer at Léargas, said the pattern is concerning. "It's happening in quite a few places, and what we're seeing is a steady escalation," Kelley said. He said many affected utilities rely on internet-connected systems so small staffs can monitor operations remotely. That convenience can also become a vulnerability.
Kelley said utilities should take a hard look at which systems are connected to the internet and whether those connections are necessary.
No California water district is named in the available reports. But the attack pattern is a reminder for California's many small and mid-sized water utilities. Remote monitoring is common, and any system connected to the internet can be a target. California agencies should review network access, change default passwords and limit remote connections to essential functions.
U.S. officials have repeatedly warned that water utilities are attractive targets because they are essential and often have limited cybersecurity staff. The new reports suggest those warnings are not theoretical. A coordinated campaign against water systems would be unusual and would mark a significant escalation.
The Clayton County incident shows how quickly a cyberattack can affect a basic service. The investigation is ongoing, and the full scope of the attacks may not be known for some time. For now, the advice from security experts is clear: audit every internet-connected system and remove anything that does not need to be online.
