A wave of suspected Iranian cyberattacks against U.S. water utilities is exposing long-standing vulnerabilities across one of the country's most critical infrastructure sectors, renewing warnings that thousands of local systems remain dangerously easy targets for foreign hackers. At least a dozen states have been affected by the recent campaign, including Minnesota, where at least 30 water systems were targeted, according to a Washington Post report. In March 2023, the Environmental Protection Agency sought to require states to incorporate cybersecurity assessments into reviews of public water systems and address significant vulnerabilities. A water utility in western Arkansas was targeted late last month as part of the suspected Iranian campaign, according to The Post. The proposal would require utilities to conduct cybersecurity assessments and take corrective action when significant vulnerabilities are discovered.