Cyberattack Targets Oregon Water District as Nationwide Hacking Campaign Expands Oregon officials confirmed that hackers breached an unspecified water district’s operational technology in July, marking the state’s inclusion in a broader wave of cyberattacks targeting U.S. municipal water systems. The incident, disclosed by Governor Tina Kotek’s office on August 2, remains under investigation, with authorities declining to identify the affected district or confirm potential links to Iranian-backed hackers a connection suggested in a New York Times report published July 30. The Times revealed that at least 100 water systems across seven states, including Minnesota and Georgia, had been compromised in late July. In Minnesota, over 30 systems were hit, with one treatment plant temporarily going offline. Georgia’s attacks caused pressure drops, prompting a brief boil-water advisory. The FBI’s July 30 press release acknowledged that some intrusions "degraded water operations," including disruptions to programmable logic controllers (PLCs) industrial computers that regulate equipment. Hackers accessed these devices via the internet, altering IP addresses and passwords to disable monitoring and control functions. Reported consequences included flooding and pressure loss, which could allow untreated groundwater to contaminate supply lines. Oregon’s Enterprise Information Services confirmed the state’s awareness of the July incident but deferred questions to federal investigators or the affected entity. While the state provides cybersecurity support to local water districts, all systems are independently managed. Responses from major Oregon providers including Portland Water Bureau, Tualatin Valley Water District, Klamath Falls, Corvallis, Redmond, and Bend indicated no confirmed breaches, though some noted an uptick in attempted intrusions. The FBI has urged water operators nationwide to restrict remote access, implement security protocols, and maintain manual backup systems to mitigate risks. The attacks underscore vulnerabilities in critical infrastructure, with the FBI warning that compromised PLCs could lead to operational failures with public health implications. Investigations into the scope and attribution of the campaign remain ongoing.