CTI · reviewed · 2026-08-13

US Water-Sector Campaign Now Confirmed in 12 States — Georgia's Clayton County Confirms Disruption as FBI Details PLC Tampering

Full story & timeline

MITRE ATT&CK

• T1190 Exploit Public-Facing Application Initial Access
• T1133 External Remote Services Persistence
• T1078 Valid Accounts Stealth
• T1489 Service Stop Impact
• T1485 Data Destruction Impact

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://www.securityweek.com/water-sector-cyberattacks-reportedly-hit-at-least-12-states/
• https://www.securityweek.com/cisa-urges-water-sector-to-protect-ot-after-coordinated-attacks-on-plcs/
• https://www.bleepingcomputer.com/news/security/hackers-target-over-30-minnesota-water-utilities-in-coordinated-ot-attack/
• https://cyberscoop.com/trump-blames-minnesota-water-cyberattacks-iran/