Somebody Just Tested America’s Water System
No poison. No panic. Just a quiet demonstration that should change how you think about the next emergency.
Somebody Just Tested America’s Water System
No poison. No panic. Just a quiet demonstration that should change how you think about the next emergency.
The Jack Hopkins Now Newsletter #987: Sunday, August 2nd, 2026
Let me tell you something that most people completely misunderstand about modern warfare.
The first objective isn’t always to blow something up.
Sometimes it’s simply to prove...
“We can touch it whenever we want.”
That appears to be exactly what began during the weekend of July 26–27 and expanded into a broader federal investigation over the following week.
Federal authorities are investigating a series of cyber intrusions affecting water and wastewater systems across multiple states.
In several cases…operators reportedly lost automated control of parts of their systems …and switched to manual operations while they dealt with the problem.
There is strong evidence that Iranian-affiliated hackers have targeted U.S. water infrastructure through cyberattacks:
There is no evidence that drinking water was contaminated.
No evidence that treatment chemicals were changed.
No evidence that Americans were poisoned.
Good.
Let’s keep it that way.
Because…that’s not the lesson here.
Orientation
Think of your local water plant.
Most of us imagine concrete tanks…pumps… pipes…chlorine and a handful of city employees making sure everything works.
What we don’t picture is the computer network sitting behind it.
Valves.
Chemical feed systems.
Pressure controls.
Remote monitoring.
Much of America’s critical infrastructure…is now operated through industrial control systems connected…in one way or another…to digital networks.
Those systems make life more efficient.
They also create a new attack surface.
And…that’s exactly what hostile governments spend years studying.
Doctrine
Capability matters.
Intent can change overnight.
One of the biggest mistakes people make is assuming that because an adversary didn’t cause catastrophic damage this time…they couldn’t.
That’s rarely how intelligence professionals think.
Instead, they ask different questions.
How far did they get?
What systems could they reach?
How quickly were they detected?
What did they learn?
What did we learn?
Sometimes…a cyber operation isn’t about today’s outcome.
It’s about tomorrow’s options.
If someone demonstrates they can reach pieces of your infrastructure…they have already accomplished part of their objective.
They’ve gathered information.
They’ve mapped systems.
They’ve tested responses.
They’ve learned where the doors are.
Signal
Federal agencies have warned for some time that foreign governments…including Iran…have shown sustained interest in U.S. critical infrastructure.
Water systems are only one target.
Power grids.
Communications.
Transportation.
Hospitals.
Emergency services.
Financial networks.
Modern nations depend on thousands of interconnected systems.
Most function quietly every day.
Most Americans never think about them.
Until they stop.
Again...
There is no indication your drinking water is unsafe.
That’s important.
Don’t confuse preparedness with panic.
They are opposites.
Prepared people stay calm…because they already know what they’ll do if circumstances change.
Continuity
This is where sensible preparation comes in.
Nothing dramatic.
Nothing expensive.
Just practical habits…that make your household a little more resilient.
Consider keeping:
Several days’ worth of drinking water for your household.
An extra supply of any essential medications.
Flashlights and fresh batteries.
A battery-powered or hand-crank radio.
Portable phone battery packs charged and ready.
Shelf-stable food that doesn’t require cooking.
Printed emergency contact information instead of relying entirely on your phone.
Notice something?
Every item on that list is useful for far more than cyberattacks.
Winter storms.
Floods.
Tornadoes.
Power outages.
Water main breaks.
Preparation doesn’t care what caused the disruption.
It simply gives you options.
Identity
One of the goals of Jack Hopkins Now has never been to convince you the sky is falling.
Quite the opposite.
Our job is to help you recognize patterns before they become headlines.
There’s a difference between living in fear...
...and living with awareness.
Awareness says:
“Interesting. Someone demonstrated a capability. I’ll make sure my family is reasonably prepared, then I’ll go back to living my life.”
Fear says:
“Everything is collapsing.”
Those are not the same thing.
Not even close.
The people who remain calm during genuine emergencies…usually aren’t the smartest people in the room. I’m certainly not.
They’re the ones who prepared before they had to. I tend to do that…perhaps because I’m rarely the smartest person in the room.
Action Desk
Current assessment:
There is no evidence that these reported cyber intrusions contaminated public drinking water.
What the incidents do show:
Foreign adversaries continue probing American critical infrastructure…including systems many people assume are isolated from outside access.
Reasonable actions:
Store several days of drinking water.
Review your family’s emergency supplies.
Know how your local community communicates emergency notices.
Avoid spreading rumors or unverified social media claims during future incidents.
Pay attention to official advisories from your local water utility and emergency management office if an event occurs in your area.
None of those steps require panic.
They require about thirty minutes on a Saturday afternoon.
And if you never need them...
Wonderful.
That’s exactly how preparedness…is supposed to work.
The most valuable intelligence often isn’t the attack itself.
It’s what the attack quietly reveals…about the world we’re living in.
Today’s story isn’t about poisoned water.
It’s about a reminder.
Someone reached out…rattled the doorknob…and let us know the door exists.
The appropriate response isn’t fear.
It’s making sure the lock works.
#HoldFast
Back soon.
-Jack
Jack Hopkins
P.S. Most Americans don't prepare because they think preparedness is a prediction. It isn't. It's insurance. You don't buy homeowner's insurance because you expect your house to burn down tonight. You buy it…because you'll wish you had it if it ever does.
Sources
Primary / federal advisories
FBI & EPA Public Service Announcement, July 30, 2026 — Malicious Cyber Actors Targeting Water and Wastewater Sector Internet-Facing Programmable Logic Controllers, Causing Operational Disruptions
CISA Alert, July 30, 2026 — CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs
EPA, April 7, 2026 — EPA, FBI, CISA, NSA Issue Joint Cybersecurity Advisory to Water Systems Regarding Iranian-Affiliated Cyber Attacks
News reporting
CNN — Sweeping cyberattack on water systems in multiple states has US officials on edge
NBC News — Hackers targeted municipal water systems in 7 states this week, FBI says
NewsNation — Water systems in 7 states hit by cyberattacks: FBI
Newsweek — Map Shows States Hit By Cyberattacks on Water Systems
Technical background
Worth noting: while my statement about no evidence of contamination holds, the activity did produce boil water notices and sustained manual operations, and federal authorities reported pressure loss and flooding at some sites.
Since pressure loss can let untreated groundwater seep into pipes, the honest framing was: no contamination confirmed…but…the failure mode they induced is the one that leads there.
Here’s the Timeline Thus Far
July 22, 2026: Federal agencies (FBI, CISA, EPA, and NSA) updated an advisory warning that Iranian cyber actors were actively targeting internet-connected industrial control systems (PLCs) used by water utilities and other critical infrastructure.
July 26–27, 2026: The first large cluster of reported incidents occurred. More than 30 municipal water systems in Minnesota were targeted. Some facilities temporarily lost access to automated controls and switched to manual operation. No widespread water quality problems were reported.
July 30, 2026: The FBI and EPA issued a nationwide alert after additional utilities reported similar unauthorized access attempts and operational disruptions, warning that the activity had expanded beyond Minnesota.
July 31–August 1, 2026: Federal investigators announced that utilities in at least seven states had reported related incidents. Michigan disclosed that nine of its water systems had also been affected. Investigators said they were examining whether Iranian-linked actors were responsible, but had not yet made a formal public attribution.
August 2, 2026: Federal officials continued their investigation while emphasizing that there was no confirmed contamination of drinking water. Utilities were urged to disconnect exposed internet-facing controllers, change passwords, and ensure they could operate manually if necessary.
The thing about this cyber attack that is frightening, is the reaction from the WH. Always the finger pointing to his "adversaries" not a plan to address our vulnerabilities. Preparedness is always a good thing, because your right, disruptions to our way of life can come in many forms. It takes very little time to get together extra water, batteries, a non digital list of emergency phone numbers, non perishable food. Not panic, planning, readiness for disruption.
Every article on emergency preparedness says keep an extra supply of essential meds. Pretty much all essential meds are prescription. Pharmacies are not allowed to fill early and insurance wouldn't pay for it if they did. How do I get an extra supply?