A wave of cyberattacks targeting water and wastewater utilities has spread to at least seven U.S. states, prompting a federal investigation and urgent security warnings. The incidents, which began in late July, have disrupted operations but have not contaminated drinking water supplies, according to officials.