Cyberattacks Hit U.S. Cities and Water Systems, Raising New Concerns Over Critical Infrastructure Security

A new wave of cyberattacks targeting U.S. cities and municipal infrastructure is raising concerns about the vulnerability of essential government systems, with recent incidents affecting everything from 911 communications to drinking-water operations.

The latest incident emerged in Suisun City, California, where officials declared a state of emergency after a malicious cyberattack compromised city technology, including its 911 dispatch system. The city shut down its IT network to contain the attack, while emergency calls were redirected through Solano County. Police and fire services remained operational, and federal and state agencies are assisting with the investigation. (San Francisco Chronicle)

U.S. Water Systems Become Major Cyberattack Target

The California incident comes as federal authorities investigate a broader series of attacks against municipal water and wastewater systems across multiple states.

Since late July, utilities in at least seven states have reported cyber incidents involving internet-connected equipment used to monitor and operate water infrastructure. More than 30 water systems in Minnesota were reportedly targeted, while additional incidents have surfaced in states including Michigan, Georgia, New Jersey and South Dakota. (Business Insider)

In Braham, Minnesota, attackers disrupted access to water-system controls, highlighting how a cyber intrusion can potentially move beyond stolen information and interfere with physical infrastructure. Federal authorities are investigating the attacks, but the FBI has not publicly made a definitive attribution. (The Wall Street Journal)

Georgia has also reported attacks involving water utilities, including systems serving Clayton County and Columbus. Clayton County experienced reduced water pressure and issued a precautionary boil-water advisory before service was restored. Officials reported no evidence that the safety of the drinking water itself had been compromised. (GovTech)

Why Hackers Are Targeting Cities

Municipal governments can be attractive targets because they operate large networks containing public records, employee information, payment systems, emergency communications and critical infrastructure.

Smaller cities and utilities can face an additional problem: limited cybersecurity budgets and small IT staffs responsible for protecting increasingly interconnected technology. In Braham, for example, the city reportedly operates on an annual budget of roughly $2.5 million and does not have an in-house IT department. (The Wall Street Journal)

Cybersecurity experts have also warned about exposing industrial equipment such as programmable logic controllers, or PLCs, directly to the internet. These devices can control pumps, pressure and other physical processes, meaning a successful intrusion could potentially have consequences beyond a traditional data breach. (Business Insider)

Cyber Threats Against Local Government Are Growing

The recent incidents are part of a larger cybersecurity challenge facing American municipalities.

In March 2026, Foster City, California, was forced to suspend most public services outside emergency operations following a ransomware attack. Officials warned that personal information may have been accessed during the intrusion. (CSIS)

The problem extends beyond 2026. A major ransomware attack against St. Paul, Minnesota, in July 2025 forced the city to shut down government networks and eventually prompted the deployment of the Minnesota National Guard’s cyber specialists. The city continued dealing with the consequences into 2026, including notifying individuals whose information had been affected. (Saint Paul Minnesota)

Research and cybersecurity organizations have warned that state and local governments continue to face increasing risks from ransomware, compromised credentials, outdated systems and attacks against third-party technology providers. (ITIF)

The Bigger Concern: Cyberattacks Can Affect the Physical World

The latest attacks illustrate an important evolution in cybersecurity.

A hacker targeting a city is no longer necessarily trying only to steal files or demand ransom. As municipal technology becomes connected to water treatment plants, emergency dispatch centers and other operational systems, cyberattacks can potentially interfere with services residents depend on every day.

The current investigations have not established that every recent incident is connected or attributable to the same actor. Reports have pointed to possible Iranian involvement in some attacks on water infrastructure, but federal investigators have not publicly confirmed responsibility, making definitive attribution premature. (The Washington Post)

What is already clear is that America’s cities and public utilities are becoming an increasingly important cybersecurity battleground. The recent attacks are likely to intensify calls for stronger protections for municipal networks, particularly the smaller communities responsible for operating critical infrastructure without the cybersecurity resources available to large corporations or federal agencies.