Cyber firm Mandiant suspects the hackers are tied to Russian military spy group Sandworm.

Source: Tex. hack may be first disruption of U.S. water system by Russia – The Washington Post