Minnesota IT officials disclose 'coordinated cyberattack' at more than 30 local water systems

The FBI said in a statement that it was aware of the incident and was in contact with victims "to resolve the matter." The Cybersecurity and Infrastructure Security Agency did not respond to a request for comment. While it is not yet clear who is responsible for the attacks, Iranian-linked hackers have for years targeted U.S. water systems to varying levels of success. An April 7 CISA advisory warned that Iranian-affiliated hackers were attacking internet-facing programmable logic controlers, computer devices used to interact with machinery and other critical infrastructure networks, manufactured by Rockwell Automation. A July 22 update to the advisory expanded the scope of the targeting to include devices manufactured by Schneider Electric, Siemens and potentially other manufacturers. Emily Zimmer, a spokesperson for the agency, told Reuters in an email that while the investigation remains ongoing, "the timing, methods of access, and targeted infrastructure share characteristics with other coordinated cyber incidents our federal partners have observed involving critical infrastructure." Zimmer said the agency could not yet discuss formal attribution or specifics of the incidents. Zimmer said the agency used the term "attack" to describe the situation "because investigators identified unauthorized access with malicious intent directed at these systems." "CISA’s updated reporting shows a worrying expansion in Iran-linked critical infrastructure targeting focused on the United States," Joe Slowik, director of threat research and cyber engineering at cybersecurity firm Dataminr, said in a July 27 [blog](https://www.dataminr.com/resources/blog/implications-of-recent-cisa-disclosures-on-iranian-ot-targeting/) posted to the company's website. While the initial advisory was concerning enough, Slowik said, "Extending this activity to encompass additional equipment lines and pairing this with process manipulation and safety degradation makes matters more concerning as it enables various physical impact scenarios." July 28 (Reuters) - A "coordinated cyberattack" targeted more than 30 community water systems in the U.S. state of Minnesota on July 26 and July 27, the state's IT agency said in a statement. The agency, Minnesota IT Services, said it was not aware of any active requests from Minnesota cities to have residents modify their drinking water usage, according to the [statement](https://mn.gov/mnit/media/blog/?id=761869), which comes a day after [local media reported](https://www.fox9.com/news/30-minnesota-water-systems-targeted-cyber-attack) that four Minnesota cities issued notices about cyberattacks on their networks. The attacks are similar to a wave of cyber intrusions against U.S. water infrastructure that officials have in the past attributed to Iranian-affiliated hackers, raising concerns about the vulnerability of local utilities that serve millions of people.

Minnesota IT officials disclose 'coordinated cyberattack' at more than 30 local water systems

FBI and CISA response

Agency says investigation is ongoing

Threat researchers warn of broader targeting

Cyberattack targeted Minnesota community water systems

Related News

Trump says he does not care about USMCA as US, Canada plan trade talks

SK Hynix Q2 profit jumps 557% on AI chip demand, misses forecasts

Cadiz Enters Two Agreements For Mojave Groundwater Bank Northern Pipeline Project - SEC Filing

Large majority of US Senate votes to advance Russia sanctions, voting continues

Zscaler to showcase AI security platform at Black Hat 2026