Iran Suspected in Cyberattacks on New Jersey Water Systems New Jersey officials confirmed that two unnamed municipal water systems in the state were targeted in cyberattacks last week, with Iran identified as the prime suspect. The incidents disrupted automated monitoring systems, forcing operators to switch to manual controls. While service remained uninterrupted and no customers lost access to safe drinking water, the attacks exposed vulnerabilities in internet-exposed control systems. The New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) responded alongside federal partners, including the FBI and the Cybersecurity and Infrastructure Security Agency (CISA). Investigations revealed that the attackers exploited weaknesses in widely used utility software, prompting a nationwide scramble to assess potential breaches in other systems running the same software. A patch has since been released. Similar incidents were reported in Georgia, where the Clayton County Water Authority briefly issued a boil-water advisory after a hack, though Columbus Water Works detected an intrusion without service disruption. At least a dozen states have seen attacks on water and wastewater utilities, though no widespread disruptions or public health impacts have been confirmed. Officials continue to evaluate the full scope of the campaign and its potential risks to critical infrastructure.

Cyberattack Disrupts Columbus Water Works Operations, Manual Systems Deployed On Monday, July 27, Columbus Water Works (CWW) in Columbus, Georgia, fell victim to a cybersecurity attack that disrupted automated data transmission systems, including water usage monitoring. Emergency Management Agency Director Chance Corbett confirmed the incident, stating that CWW immediately transitioned to manual operations to maintain service continuity. While the attack impacted certain operating systems, Corbett emphasized that water service, supply, and quality remained unaffected for Columbus residents. No public notifications were issued, as the incident posed no immediate threat to safety or infrastructure. The Georgia Emergency Management Agency (GEMA) and the FBI were notified, and an investigation is underway to identify the source of the breach. CWW is actively securing vulnerable systems, though some operations remain offline as staff conduct manual checks. Full restoration is expected by the end of the week. Corbett declined to speculate on potential links to recent cyberattacks on water systems in Minnesota, which have been attributed to Iranian threat actors. The origin of the Columbus attack remains undetermined.