Cyberattacks have targeted water and wastewater utilities in at least 12 states, according to multiple sources familiar with the federal investigation.

The FBI and Environmental Protection Agency issued warnings after more than 30 water systems in Minnesota faced coordinated intrusions last week. Incidents have since been confirmed in additional states, bringing the total to 12.

No widespread disruptions to water supplies or treatment have occurred so far. Some facilities switched to manual operations or issued temporary conservation notices after equipment issues.

Federal authorities noted that hackers accessed operational technology systems, which control pumps, valves, and chemical dosing. In limited cases, activity led to flooding risks or pressure loss.

Reports indicated possible links to foreign actors in some incidents, though officials have not confirmed attribution. The FBI continues to investigate the scope and origin of the attacks.

Water utilities nationwide received alerts to strengthen cybersecurity measures. Many small and rural systems remain vulnerable due to outdated technology and limited resources.

The incidents highlight ongoing risks to critical infrastructure. Officials urged utilities to monitor networks closely and report suspicious activity immediately.