–
Beginning July 26-27, 2026, malicious actors targeted operational technology at U.S. water and wastewater utilities, including internet-facing PLCs, causing loss of monitoring or control and some operational disruption. The FBI and EPA documented a common technical pattern, but public evidence does not establish one actor behind every incident or identify the complete victim list.
