type: incident · created: 2026-08-06 · updated: 2026-08-06 · tags: [incident, ot, water, critical-infrastructure, ics] · confidence: high · affected_sectors: [energy, government, water,critical-infrastructure] · au_impact: true
Cyberattacks on Water Systems Expand to 12 States
Cyberattacks targeting water systems have expanded to 12 US states, with South Dakota and Georgia the latest to announce incidents. CISA separately urged the water and wastewater sector to protect OT environments against activity targeting programmable logic controllers (PLCs).
| Attribute | Detail |
|---|---|
| Scope | Water-system cyberattacks in 12 US states |
| Latest | South Dakota, Georgia |
| CISA guidance | Protect water/wastewater OT against PLC-targeting activity |
| Assessment | Escalation from single-state incidents to a coordinated, multi-state campaign |
| Source | The Record / CISA — Tier 2/4 |
The spread marks an escalation from single-state incidents to a coordinated, multi-state campaign against critical water infrastructure — directly relevant to AU/NZ critical-infrastructure resilience (SOCI Act / Australia's water sector).
Related Pages
- Cisa Urges Water And Wastewater Systems To Protect Ot Against Activity Targeting — CISA water OT guidance
- Aa26 231A — related OT advisory (Siemens S7 PLCs)