Cyberattack Wave Hits Water Utilities in a Dozen States

KEMETIC MINDS
Infrastructure Watch — Daily Update — August 15, 2026

---

Today’s briefing leads with a wave of cyberattacks that has put U.S. water utilities in about a dozen states on high alert. New research also links microplastics in regional water supplies to cardiovascular disease risk. In the power vertical, work is accelerating at Libya’s fire- and attack-damaged South Zawiya station.

• A wave of cyberattacks has targeted water and wastewater utilities in about a dozen states in recent weeks, disrupting operations at some facilities (Decatur Daily, 2026).
• Moulton, Alabama, preemptively blocked IP addresses linked to potential Iranian cyberattacks after a federal warning was relayed through the Lawrence County Emergency Management Agency (Decatur Daily, 2026).
• Newport News officials say they are working to protect the water supply amid the nationwide attacks: “We always keep an eye out” (WAVY.com, 2026).
• Case Western Reserve University researchers found a statistical association between microplastic concentrations in local water bodies and cardiovascular disease prevalence (Ponnana et al., 2026).
• A New England Journal of Medicine study of 304 carotid endarterectomy patients documented microplastic accumulation inside human cardiovascular tissue (Futura Sciences, 2026).
• In Libya, new transformers are being installed at the South Zawiya power station after fire and an attack knocked it offline (Libya Observer, 2026).

---

1. Water Supply: Cyberattacks Put Utilities on High Alert

A wave of cyberattacks has targeted water and wastewater utilities in about a dozen states in recent weeks, disrupting operations at some facilities and renewing concerns about the vulnerability of the nation’s water infrastructure (Decatur Daily, 2026). Months before the latest attacks, Moulton officials moved to block internet addresses linked to potential Iranian cyberattacks after receiving a federal warning through the Lawrence County Emergency Management Agency (Decatur Daily, 2026).

Mayor Ryan Jolly said the warning originated at the federal level and was relayed through the county EMA — and that his IT staff, who are “very proactive,” had already implemented steps to block and mitigate the flagged IP addresses by the time he called (Decatur Daily, 2026). Decatur Utilities General Manager Ray Hardin said the utility is “aware of and actively monitoring” the increase in threats, has proactive security measures in place, and stays in regular contact with CISA, the FBI and other relevant state and federal entities (Decatur Daily, 2026). Spokesman Joe Holmes said the utility declines to provide further specifics based on internal security protocols (Decatur Daily, 2026).

Newport News officials say they are working to protect the water supply amid the nationwide attacks: “We always keep an eye out” (WAVY.com, 2026). A Hill commentary argues the U.S. may already be losing a “World War IV” fought with mouse pads and joysticks — a scenario that begins with shutting down the water supply and the electrical grid (The Hill, 2026). Separately, Case Western Reserve University researchers presented data at the American College of Cardiology linking microplastic concentrations in local water bodies to cardiovascular disease prevalence, reporting framed as a link to higher risks of heart attack and stroke (Futura Sciences, 2026).

A New England Journal of Medicine study of 304 carotid endarterectomy patients analyzed removed vascular tissue with electron microscopy and chemical spectroscopy, providing physical evidence of microplastic accumulation inside the human cardiovascular system (Futura Sciences, 2026). Lead author Sai Rahul Ponnana cautioned that the data establish a statistical association, not direct biological causation, and that conventional filtration fails to capture sub-micron particles (Ponnana et al., 2026; Futura Sciences, 2026). He said reducing plastic manufacturing and improving waste containment are the primary methods for lowering human systemic exposure (Futura Sciences, 2026).

---

2. Power Supply: South Zawiya Station Hit by Fire and Attack

International watch: the Government of National Unity announced it is accelerating rehabilitation work at the South Zawiya power station (30/11 kV) under the Prime Minister’s directives, after fire and an attack caused the station to go offline (Libya Observer, 2026). Technical teams from the General Electricity Company have begun removing the transformers damaged by the fire and attack and are installing new transformers, with technical preparations under way to restart operations (Libya Observer, 2026).

Officials said intensive maintenance work continues to bring the station back online as soon as possible, restoring electricity to affected areas and strengthening the stability of the regional power grid (Libya Observer, 2026). Related reporting from the same outlet says the Africa Defense Forum has reported accelerated Russian moves to strengthen Moscow’s military presence in Libya, including plans to fund and carry out infrastructure projects (Libya Observer, 2026).

The U.S. has called for comprehensive investigations into recent violence in the cities of Al-Zawiya and Benghazi (Libya Observer, 2026). Prime Minister Abdul Hamid Dbeibah said targeting oil and industrial facilities with drones represents “an escalation,” and the Ministry of Marine Resources has confirmed effects of oil pollution detected off the coast of Brega (Libya Observer, 2026).

---

What’s Disputed or Unconfirmed

The Hill’s “World War IV” essay is opinion commentary built on a hypothetical Chinese attack scenario — useful as alarm-raising argument, but not a report of verified operations or intelligence (The Hill, 2026).

The reported scope of the water-utility attack wave — “about a dozen states” — and the potential Iranian attribution rest on utility statements and a federal warning relayed through the Lawrence County EMA; no independent confirmation of the attackers’ identity appears in today’s sources (Decatur Daily, 2026).

The microplastics findings are observational; the study’s lead author explicitly said the data do not prove direct biological causation and that clinical trials must establish exposure thresholds and toxicological timelines (Ponnana et al., 2026).

The South Zawiya account comes from the Government of National Unity’s announcement; the cause of the outage is attributed to fire and an attack on that authority’s account, and the Russian infrastructure plans are attributed to Africa Defense Forum reporting — neither independently verified in the supplied material (Libya Observer, 2026).

---

🛡️ Free Preparedness Guides

Two free, printable checklists you can download and keep on hand — one for water-supply
disruptions, one for power outages.

---

References

1. WAVY.com. (2026, August 15). ‘We always keep an eye out’: NN officials working to protect water supply amid recent nationwide cyber attacks. wavy.com
2. thehill.com. (2026, August 15). Is the US already in World War IV — and losing?. thehill.com
3. futura-sciences.com. (2026, August 15). Microplastics in local water supplies linked to higher risks of heart attack and stroke. futura-sciences.com
4. decaturdaily.com. (2026, August 15). Local utilities say they are prepared for a cyberattack. decaturdaily.com
5. The Libya Observer. (2026, August 15). Rehabilitation work accelerated at South Zawiya power station after damage. libyaobserver.ly

---