Key Points:
Water War Chain: Exposed Rockwell MicroLogix controllers → Iranian-linked breaches across 12-plus states → Forced federal and state security mandates that flow to water bills, property taxes, and OT security spend.
By the Numbers: More than 3,000 Rockwell MicroLogix controllers remain visibly exposed on the open internet, with over 30 Minnesota plants breached on July 27 alone and confirmed intrusions across at least 12 states since late July.
Regulatory Setup: If the EPA finalizes its expected operational-technology security rule this cycle, thousands of small utilities will be guided to a multi-year hardware refresh, forecast to concentrate spend in a narrow group of legacy PLC vendors and OT security specialists.
Capital Rotation: Rockwell Automation (ROK) sits at the center of the forced-upgrade cycle, and the sub-$10 billion OT security cohort is the quiet institutional bid tied to every one of the 3,000-plus exposed devices.
There's a man in Vermont named Chris Hughes. He runs the water for a small town called Cavendish. He told a reporter he is "the only door between the Iranians and our water system." I can't stop thinking about this.
Two guys run that town's water. Just two. Right now, hackers from Iran are trying the door. This is your tap water. Your kid's bath. Your morning coffee. Our drinking water.
Since late July, hackers tied to Iran have hit water plants in at least 12 states. On July 27, they hit more than 30 plants in Minnesota. In one day. Nine systems in Michigan. A pump station in Georgia lost pressure. Families ran the taps and got nothing. Then they got a boil warning by text. A wastewater station in South Dakota. Places in New Jersey. And more we don't know about yet.
Missed Nvidia at $4.50? This Could Be Your Second Chance…
If you missed out on Nvidia…
You see, Wall Street insider Jason Bodner — the man who called Nvidia at $4.50 — says a completely new type of AI is on the rise…
He calls it “Accelerated AI”…
And it’s about to launch a whole new wave of AI winners.
To prove it, he’s giving away his #1 stock involved with it — for free.
P.S. Stocks tied to “Accelerated AI” already surged 133%, 217%, even 320% — in a few short months. But it’s just getting started. Click here before the mainstream catches on.
Here's what worries me. They didn't have to break in. The door was open.
Small water plants use little computers to run the pumps. The most common brand is Rockwell. These boxes sit in a shed or a basement. They tell the pump when to start. They tell the valve when to open. They tell the tank when it's full. Many of them sit on the open internet. A lot still use the password they came with from the factory. Stuff like "1234." Or no password at all.
More than 3,000 of these boxes are visible online today. Right now, as you read this. Anyone with a laptop can find them. A kid in a bedroom. A team in Tehran. It's the same door.
Think about what a plant does. It takes river water. It cleans it. It pushes it to a tank. It sends it down the pipes to your house. If someone flips the wrong switch, the pump can burn out. The chemicals can mix wrong. The pressure can drop and dirty water can get pulled in from a crack in a pipe. This is not science fiction. It has happened by accident before. Now think about it on purpose. All at once. In dozens of towns.
We've been at war with Iran since February. They call it Operation Epic Fury. The news shows you missiles. Ships in the Gulf. The price of oil. I get it. Those things matter.
Elon Musk walked away from the biggest IPO in history with a massive "war chest."
Now he's spending it to complete his dynasty...
He's already purchased a $40 billion AI firm. And a $1 billion turbine company.
But his next three moves are the ones that could double your money overnight.
But nobody is showing you Chris Hughes.
I don't think most people realize where this war is really being fought. It's not just the Gulf. It's Cavendish, Vermont. It's a town in Michigan you've never heard of. It's a pump on the edge of a small city in Georgia. It's a shed in South Dakota with a laptop on a folding table.
Nobody knows how many pump stations the Iranians have already poked at. Nobody knows what code they left behind. Nobody knows how many will fail on the same day if the order goes out. That's the truth. I won't pretend I know more than I do.
Here's the number I keep saying to myself.
Two guys. Three thousand open doors. One war.
That's the whole story in one line.
The bill for this is coming. It has to. The EPA is writing new rules. States are writing their own. Every small water plant in the country will have to lock its doors. Hire help. Buy new gear. Train the guy who used to just fix pipes. Now he has to fight off a nation.
That money doesn't come from the sky. It comes from your water bill. From your property tax. From the town budget that was already tight.
There's a market angle here too. I have to be honest with you about it. That's what we do at American Ledger. Rockwell Automation makes those boxes. The ticker is ROK. They will sell a lot of new ones soon. The old ones have to come out. That's a wave.
The other wave is the small group of firms that guard these systems. It's a quiet corner of the market. Most people ignore it. Big money is starting to notice. I'm watching it. I'll write more about the names next week.
But that's not really why I'm writing tonight.
I'm writing because of Chris.
One man. In a small town. With a wrench and a laptop. Standing at the door.
I keep coming back to that word he used. Door. Not wall. Not fortress. Door. A door swings both ways. Someone has to stand there.
Tonight, when you turn on the tap, think about him. Think about your own town. Think about the guy who fixes your pump. He probably doesn't know a hacker from a plumber. That's not his fault. Nobody trained him for this. Nobody paid him for this. Nobody warned him.
But he is the door.
We are going to spend the next year finding out how many of those doors got left open. Some of what we find is going to scare us. Some of it already has.
I'll be here for it. I hope you will too.
More on this tomorrow.
— American Ledger
