Sistemas de água de pelo menos 12 estados dos… · Breach

[Single source] Hackers Switch Off Water System Alarms Across at Least 12 US States

Nov 10, 2026 · 1 min read

Intruders accessed water systems in at least 12 US states via the internet, changed passwords and switched alarms off, leaving operators unable to see what the machines were doing. Around 30 systems were hit in Minnesota, 9 incidents are confirmed in Michigan, and a Georgia county issued a boil-water advisory; the prime suspect, according to the report, is Iran-linked hackers. The FBI told utilities to unplug from the internet where they can and prepare to run controls by hand.

By HIFY Radar newsroom Updated 11/10/2026 01:08 AM Get this every day →← Back to the feed 1 source

HighBreachNo software to update

In 30 seconds

Alleged

Hackers have reportedly hit water systems in at least 12 US states, and the playbook, as described, is short: get in through the internet, change the passwords, switch the alarms off. Operators at affected plants were left running machinery by hand, one Georgia county told residents to boil their water, and the FBI, according to the report, told utilities to unplug from the internet where they can. The named prime suspect is Iran-linked hackers, and that attribution remains an allegation.

Inferred

Every detail here traces back to one post on X, so treat the counts, the incidents and the suspect as reported, not established.

What happened

Alleged

According to the post, about 30 water systems were attacked in Minnesota. Michigan has 9 confirmed incidents. In New Jersey, two town water systems went blind, meaning staff lost their monitoring view and had to run the plants manually.

Alleged

In Georgia, a county water authority issued a boil-water advisory, a notice telling residents to boil tap water before drinking it, after being targeted, the post claims.

Alleged

The FBI's reported guidance to utilities is to disconnect from the internet where possible and prepare to operate the controls by hand.

Why it matters

Inferred

A blind water plant is the real stake. If passwords are changed and alarms are off, the people running your tap water cannot see tank levels, treatment equipment or failures until something breaks in the physical world.

Inferred

The post puts the stakes plainly: a warm fridge spoils food, a blind water plant is a different story. The boil-water advisory in Georgia shows how fast a control problem turns into a public health instruction.

What to do

Alleged

For utilities, the reported FBI advice is blunt: unplug internet-facing controls where you can, and rehearse manual operation before an incident forces it.

Inferred

For households, the practical step drawn from the evidence is simple: follow local water advisories, especially boil-water notices, and look for updates from your water authority rather than from social posts.

Confirmed and still uncertain

Alleged

Claimed so far: attacks in at least 12 states, about 30 systems in Minnesota, 9 confirmed Michigan incidents, 2 blinded New Jersey towns, 1 Georgia boil-water advisory, and a method built on password changes and disabled alarms.

Inferred

Not known: the evidence includes no official advisories, no utility statements and no FBI release. The Iran attribution for the US water attacks is presented as a prime suspect, not a confirmed finding, and there is no information on whether water quality or service was actually harmed anywhere.

What people are saying

Alleged

The post quotes the head of the security firm Dragos saying his team handled "numerous" cases in the past year in which Iranian hackers did "very similar things to water utilities."

Alleged

The post's author frames the moment as an escalation, writing "It's starting," and points to France, which he says publicly named a cyber unit of Iran's Revolutionary Guards as behind the October refrigerator attacks.

Evolution

Alleged

The chain starts in France in October, as the post tells it: in one night, hackers took over refrigeration at 700 stores, the same way in through the web with safety alerts switched off, and around 20 fires followed.

Alleged

Then, per the post, France attributed that operation to an IRGC cyber unit. Now comes the US water report, with Iran as prime suspect and a security executive describing a year of similar water cases.

Inferred

The sequence suggests a pattern, maybe one playbook reused against anything online and unwatched. But similarity and timing are not proof, and nothing in the evidence ties the US water intrusions to the French operation.

Reach

Observed

1 independent groups, 1 updates, and 0 engagements.

Technical detail

Alleged

The tradecraft, the attackers' basic method, is almost boring, which is the point. They reach equipment exposed to the internet, change passwords so legitimate staff are locked out, and disable alarms, the alerts that surface when something goes wrong. Operators lose their view of the machines before anything else happens.

Inferred

That matches the French refrigerator hack in shape: web access plus safety alerts turned off. The shared skeleton hints at a commodity approach to any online, unwatched device, though that link is inferred from a single post, not established.

Sources and evidence

Observed

This brief rests on one item: a post on X by EdwardTWinz. It carries no links to primary documents, no FBI advisory, no state or utility statement and no published Dragos remarks, so every figure and every name above inherits the weight of that single source.

Inferred

Verification would need the underlying material: official incident reports from the affected states, the FBI guidance itself, and on-record comments from the utilities and from Dragos. None of that appears in the current batch.