María Paula Mijares Torres | 1 Aug. 2026, 3:52 p.m. EDT
Michigan is the latest state to disclose intrusions into its water infrastructure, with nine systems hit in what U.S. intelligence has attributed to Iran. The announcement extends a pattern that began with Minnesota, where authorities say at least 30 water systems were attacked.
The attacks on America's water systems are bigger than one state. The Michigan report came after an FBI warning. U.S. agencies have told the public that systems in at least seven states were affected, but they have not identified them.
The FBI and EPA issued a joint alert Thursday.
Dale George, a spokesperson for Michigan's state environment department, told reporters Saturday: "We received a small number of reports from Michigan communities indicating activity consistent with what federal agencies described. "All systems continued to operate safely, issues were addressed by local operators, and there are no known impacts that posed a public health concern"."
Get the market news that matters in a five-minute read with Market Briefs, our free daily newsletter
The FBI did not immediately reply to a request for comment.
According to the New York Times, U.S. intelligence analysts have identified Iran as the likely culprit. President Donald Trump, though, assigned blame to Minnesota Governor Tim Walz, calling him "grossly incompetent" and "corrupt," and said he rejected the intelligence analysts' finding.
"There was a cyber attack of 30 water plants, and I would blame it on Minnesota and the governor, the corrupt governor of Minnesota," Trump said. "They like to say, 'Oh, it's Iran.' Iran should be so lucky. Iran's got bigger problems than worrying about Minnesota."
Related: Trump Points Finger at Minnesota Governor Instead of Iran.
The friction between the two men had already deepened after federal immigration agents fatally shot two American citizens during Minneapolis protests in January.
The cyberattacks have put a spotlight on the vulnerability of water utilities, especially smaller systems that rely on internet-connected controls. Smaller utilities often lack dedicated cybersecurity staff, making them especially reliant on state and federal warnings like the one Michigan cited. Michigan officials said they found no evidence that public health was endangered. The affected states have not all been named, and investigators are still working to determine the full scope of the campaign.
Federal agencies have not said whether the affected systems outside Michigan are concentrated in one region or spread across the country. They have also not described how the intruders first gained access. Michigan officials said no public health notices were issued and that water service continued without interruption.
Michigan's reports matched the activity federal agencies described, and local operators handled the issues. The Minnesota cases helped expose the pattern, and Michigan's disclosure shows the issue reaches across state lines.
Join Market Briefs, our free daily newsletter, for a quick daily rundown of the markets
