Hackers believed to be supported by Iran targeted more than 30 municipal water systems in Minnesota on July 26 and 27, 2026, according to multiple media reports. This incident aligns with federal warnings regarding potential disruptions to U.S. water, wastewater, and energy facilities by Tehran. Minnesota IT Services (MNIT) confirmed that a coordinated cyberattack prompted the activation of the state's cybersecurity incident response protocols.
The attack temporarily took one system offline and disrupted remote sensors at another, although no unsafe drinking water has been reported. John Israel, Minnesota's chief information security officer, stated that such cyberattacks necessitate a coordinated government response.
Investigations are ongoing to determine if Iranian hackers were indeed responsible, with intelligence officials noting that the assessment is preliminary as further forensic evidence is collected. The FBI is involved in the investigation, and if Iranian involvement is confirmed, it could represent a significant escalation in Tehran's targeting of U.S. critical infrastructure.
Joe Slowik, director of threat research for Dataminr, commented on the ongoing nature of such attacks, indicating that disruptions have occurred across various critical infrastructure sectors.
Former President Trump expressed skepticism regarding the attribution of the attack to Iran, suggesting instead that Minnesota's state government was to blame for incompetence. Minnesota Governor Tim Walz countered that federal budget cuts have left the U.S. vulnerable to such cyber threats, emphasizing the need for better funding to enhance cybersecurity measures.