Did Iran Target New Jersey’s Water Systems in a Cyberattack?

NEW JERSEY — Two municipal water systems in New Jersey were targeted by cyberattacks during the past week, prompting the affected utilities to temporarily switch from automated systems to manual operations.

The two utilities have not been publicly identified. According to state officials, their automated monitoring systems were temporarily disabled, leaving operators without normal digital visibility into parts of their operations. However, officials said there was no interruption to water service and no reported threat to drinking-water safety. Both systems have since been secured with stronger access controls. (6abc Philadelphia)

The attacks are believed by some investigators to be connected to a wider campaign targeting water and wastewater systems across the United States. Similar incidents have recently been reported in at least a dozen states, including Minnesota and Michigan. Federal authorities are investigating the attacks as part of a broader threat to critical infrastructure. (Axios)

Iranian-linked hackers are among the main suspects, but the attacks have not been formally attributed to Iran. The FBI has not publicly identified the person, group or government responsible. Federal cybersecurity agencies have previously warned that Iranian hackers were targeting water systems and other operational technology in the United States. (6abc Philadelphia)

Rep. Frank Pallone (D–N.J.) also reacted to the incidents, saying they demonstrate the growing cyber threats facing America’s critical infrastructure.

“Our critical infrastructure is facing increasingly sophisticated cyber threats. And while I’m glad NJ acted quickly and there’s been no reported impact on our water systems, this was too close for comfort. I’m determined to get to the bottom of this and make sure we’re prepared to protect our drinking water,” Pallone wrote in a post on X.

The New Jersey Cybersecurity and Communications Integration Cell currently lists the state’s cyber alert level as elevated and has warned about increased risks facing water and wastewater infrastructure. (Cyber NJ)

The incidents highlight the vulnerability of smaller municipal utilities that rely on internet-connected systems to monitor pumps, pressure, treatment equipment and other essential operations. When those systems are compromised, employees may be forced to operate equipment manually until digital access is restored.

Although residents served by the two affected utilities reportedly experienced no disruption, the investigation remains ongoing. State and federal officials have not disclosed the locations of the systems, citing security concerns.

Sources: 6abc Action News; Associated Press; Reuters; New Jersey Cybersecurity and Communications Integration Cell.