Iran-linked hackers are increasingly turning their attention to the critical infrastructure that keeps Western communities functioning, raising fears that the cyber front of the confrontation with Tehran could become as dangerous as the battlefield itself.
Hackers linked to Iran have targeted water and wastewater systems in at least 12 U.S. states, with some facilities experiencing disruptions and being forced to take defensive measures. The attacks have heightened concerns among American officials that vulnerable industrial-control systems could be exploited to interfere with essential public services.
The threat has also crossed the Atlantic.
In Britain, an Iranian-linked cyber operation reportedly disrupted a small power plant for four days, highlighting the potential consequences of attacks against energy infrastructure. Although the incident did not cause a nationwide electricity crisis, it demonstrated that attackers can potentially reach systems responsible for controlling physical infrastructure.
That is what makes the latest incidents particularly alarming.
Cybersecurity experts warn that such attacks may serve as reconnaissance as much as disruption — allowing hostile hackers to identify weak systems, study how operators respond and determine which infrastructure could be targeted again in a larger campaign.
U.S. authorities have previously warned about Iranian cyber groups targeting critical infrastructure and industrial-control technology. Recent warnings have specifically highlighted vulnerabilities involving programmable logic controllers, or PLCs, which are used to operate machinery and processes in sectors including water, energy and manufacturing.
The concern is that America’s sprawling network of privately and locally operated infrastructure creates thousands of potential entry points. Many smaller facilities do not possess the same cybersecurity resources available to major corporations or government agencies.
Water systems are particularly sensitive because a successful cyberattack does not necessarily require physically destroying a facility. Manipulating pumps, valves, sensors or other control systems could potentially disrupt operations or force authorities to shut systems down as a precaution.
Power infrastructure presents an even more serious target.
A prolonged disruption affecting electricity could interfere with hospitals, communications, businesses, transportation and other essential services. Even a relatively small successful intrusion can therefore send a powerful message: an adversary does not necessarily need missiles to create disruption inside an enemy’s territory.
Iran has developed significant cyberwarfare capabilities over the years and has repeatedly been accused by Western governments of conducting malicious cyber operations against foreign targets.
The latest incidents suggest that the battle is increasingly moving into an uncomfortable space where ordinary infrastructure — water pumps, electrical controls and industrial computers — can become potential targets.
For Washington and London, the challenge is now not simply stopping hackers from stealing information. It is preventing cyber intrusions from producing consequences in the physical world.
The attacks have not brought U.S. or UK infrastructure networks to their knees, but they have exposed a troubling vulnerability: some of the systems millions of people depend on every day were never designed to withstand a determined state-backed cyber campaign.
And that raises the most uncomfortable question of all: if Iranian-linked hackers are already probing the weakest points in Western infrastructure, are these disruptions the objective — or merely a rehearsal for something far bigger?