# CISA Urges Water Utilities to Secure OT

On July 30, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) issued an alert urging water and wastewater utilities to secure operational technology after cyber activity affected 30 water plants in Minnesota. Officials said attribution to Iran-linked actors remains preliminary and unconfirmed. The alert does not identify a solicitation or dedicated funding, but it highlights operational technology security needs that utilities and their contractors may need to address through existing or future procurements.

- Utilities can use the alert to assess needs for PLC and OT security reviews, network segmentation, secure remote access, and incident-response support.
- Contractors offering these services may find relevant demand among water and wastewater operators, but the signal describes no specific procurement or funding opportunity.
- Procurement teams can translate the highlighted security areas into assessments of their current utility systems and service needs; attribution should not be treated as confirmed.

**Jurisdictions:** federal
**Industries:** Energy & Utilities, Information Technology
**Topics:** Cybersecurity
**Published:** October 10, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)
- Federal Bureau of Investigation (FBI)
- Minnesota IT Services (MNIT)

### Key Quotes
> We have provided relevant information to the federal government, which is evaluating this activity in the broader national context and leading efforts to determine whether it can be attributed to a specific threat actor.
> — John Israel, Minnesota Chief Information Security Officer

### Sources
- [Feds issue warning to local water systems over increased cyberattacks, following Minnesota incident - ABC7 San Francisco](https://abc7news.com/story/feds-issue-warning-local-water-systems-increased-cyberattacks-following-minnesota-incident/19606049) - ABC7 Bay Area