Dam maintenance divers in Mobile, Alabama, discovered a grenade-type improvised explosive device (IED) underwater at the base of the Converse Reservoir Dam during routine surveys for repairs. The Mobile Area Water and Sewer System (MAWSS) promptly notified the Mobile County Sheriff’s Office, leading to a coordinated multi-agency response by the Gulf Coast Regional Maritime Response and Render-Safe Team. The device was safely retrieved and detonated with no injuries or damage to the dam, which supplies drinking water to the region and is federally designated as critical infrastructure by the Department of Homeland Security. Officials have notified DHS and announced plans to increase physical security at the site, though no suspects have been identified and the length of time the device was present remains unknown.[1][2]

This physical breach coincides with urgent federal warnings about targeted threats to the same sector. In April 2026, the EPA, FBI, CISA, and NSA issued a joint advisory detailing Iranian-affiliated advanced persistent threat actors exploiting programmable logic controllers and operational technology in U.S. drinking water and wastewater systems, resulting in disruptions, sensor tampering, and financial losses. These cyber campaigns are viewed as attempts to cause real-world effects on critical infrastructure amid heightened geopolitical tensions.[3][4]

While mainstream reporting has treated the Alabama incident primarily as a successful render-safe operation, the juxtaposition reveals under-examined patterns: physical sabotage capabilities paired with state-linked cyber intrusions against water supplies. Historical analyses of insider IT sabotage across U.S. critical infrastructure sectors, alongside emerging concerns over hardware vulnerabilities and foreign supply-chain risks, indicate that both domestic actors and adversarial nations are probing defensive gaps. The “grenade-type” nature of the device suggests it may have been a test of detection and response protocols rather than an immediately catastrophic weapon, yet its placement at a submerged critical point exposes serious vulnerabilities in underwater monitoring that receive scant ongoing attention. As authorities enhance protections at Converse Reservoir, the event underscores the need for integrated physical-cyber defenses at hundreds of similar dams and reservoirs nationwide.