Iranian Hackers Target U.S. Industrial Infrastructure

A joint advisory from the FBI, NSA, Department of Energy, and CISA confirms that attackers are compromising programmable logic controllers—the digital brains of industrial machinery. While initial reports focused on Rockwell devices, the threat has expanded to include equipment from Schneider Electric and Siemens. Officials caution that any internet-exposed industrial system remains a potential target.

In one documented breach, hackers disabled critical shutdown and alarm processes, forcing systems into unsafe states without alerting human operators. This shift from traditional cyber-espionage to destructive interference marks an escalation in Iranian-linked activity. Beyond utility providers, groups like Handala have targeted private entities, including medical tech giant Stryker, where thousands of employee devices were remotely wiped. While the group claimed a breach of California-based Cal Water in June, the provider maintained that its operational networks remained secure. Federal authorities are now urging infrastructure owners to immediately audit their network exposure to mitigate further disruption.