The Wire
BusinessPolitics & PolicyCybersecurityWorld

Minnesota water systems hit in cyberattacks as Iran warning escalates

Minnesota water systems hit in cyberattacks as Iran warning escalates
Photo: apnews.com

Officials are investigating cyberattacks on more than 30 Minnesota water systems.

Why it matters: Water utilities are critical public-safety infrastructure, and even limited intrusions can expose weak points in state defenses. The timing also raises the stakes because U.S. agencies are warning about Iranian-linked activity against water and wastewater systems.

  • AP reported the attacks hit operating technology at more than 30 Minnesota water systems, including Plymouth's.
  • The incidents occurred Sunday and Monday and were publicly discussed on July 30, 2026.
  • Minnesota IT Services said officials had not yet identified who was behind the attacks, and the FBI was investigating.
  • FOX 9 said Plymouth, South St. Paul, Maple Plain and Braham publicly disclosed water-facility cyberattacks, with limited impacts and safe drinking water.

Officials are investigating cyberattacks on the operating technology at more than 30 Minnesota water systems, according to AP. The incidents took place Sunday and Monday before being publicly discussed July 30, 2026.

Minnesota IT Services said state officials had not yet identified who was behind the attacks. The FBI is investigating and has not publicly named a culprit.

The reports come as U.S. agencies warned last week that Iranian hackers have been targeting water and wastewater systems and other critical-infrastructure operational controls. CISA's advisory says Iranian-affiliated actors exploit PLCs in multiple sectors, including U.S. water and wastewater facilities: CISA advisory.

Local coverage said at least four Minnesota cities publicly disclosed attacks: Plymouth, South St. Paul, Maple Plain and Braham. FOX 9 reported the impacts appeared limited and that residents could continue using water normally, with drinking water safe: FOX 9 report.

MPR News reported Braham officials said the city's water plant was briefly knocked offline: MPR News. Minnesota Department of Health guidance says community water systems using operational technology such as SCADA must conduct an annual cybersecurity assessment and certify completion with MDH: MDH guidance.

By the numbers

  • More than 30 - Minnesota water systems targeted, according to AP and state officials.
  • 4 - Minnesota cities publicly disclosed water-facility cyberattacks in local coverage.
  • 1 - brief plant outage reported in Braham.

Yes, but: Officials have not yet publicly identified the attacker, and there is no confirmed forensic attribution linking every affected system to the same actor.

What's next: The FBI and Minnesota officials are still investigating, and more details could emerge as they identify affected systems and determine attribution.

Based on reporting from

  • AP News
  • BBC Business

See how this story touches your network - open The Wire in Jane.

Open in Jane