Georgia, Michigan Water Systems Hacked as Iran-Tied Group Targets PLCs
On this page
Georgia, Michigan Water Systems Hacked as Iran-Tied Group Targets PLCs
A coordinated cyber campaign targeting America's water infrastructure has breached two more states , Georgia and Michigan , confirming that an Iran-affiliated advanced persistent threat (APT) group is systematically compromising internet-facing programmable logic controllers (PLCs) at water and wastewater utilities across the country. With over 30 facilities now believed impacted, the attacks repr
Detail
The targeting of operational technology (OT) , specifically Rockwell Automation/Allen-Bradley MicroLogix 1100 and 1400 series PLCs , signals a paradigm shift in nation-state cyber operations. Adversaries are moving beyond IT network espionage toward direct manipulation of physical processes, elevating the urgency for industrial asset owners to reassess their OT exposure. Analysts project the global ICS security market will see double-digit growth through 2028 as utilities scramble to retrofit legacy PLC deployments.
The intrusions, which first surfaced on July 27, 2026, have now been confirmed across at least seven states. Georgia and Michigan join earlier-affected regions, with Minnesota also publicly acknowledging disruptions. The FBI and Environmental Protection Agency (EPA) issued a joint Public Service Announcement on July 30 warning that "malicious cyber actors" were actively tampering with PLC configurations , changing IP addresses, setting unauthorized passwords, and modifying ladder logic , causing operational disruptions and, in some cases, complete loss of view and function at targeted facilities.
One victim organization reported discovering modified PLC project files after noticing ladder logic discrepancies across multiple sites, a finding that underscores the attackers' sophisticated understanding of industrial automation programming.
Iranian-affiliated APT group begins disrupting PLC function across U.S. critical infrastructure sectors, per CISA advisory AA26-097A.
Multi-agency advisory warns of Iranian cyber actors exploiting PLCs in Water, Energy, and Government Services sectors.
CISA updates advisory, confirming actors targeting Rockwell Automation, Schneider Electric, and Siemens PLCs using leased foreign infrastructure.
FBI-EPA joint PSA warns of ongoing tampering with internet-facing MicroLogix 1100/1400 PLCs.
Sourcing help
Send the BOM for one quote covering active stock, EOL stock and cross-references.
Need a quote for this part?
Send us the part number or article link — we will confirm price, availability and lead time.
