U.S. investigating if Iran was behind cyberattack on Minnesota water systems

July 31, 2026 - 02:06

Federal investigators are now looking into whether Iranian state-backed hackers are responsible for a cyberattack that disrupted technology at more than 30 community water systems in Minnesota this week. The incident, which affected supervisory control and data acquisition systems used to monitor and operate water treatment, has triggered a multi-agency response.

According to sources familiar with the matter, the breach appears to have targeted remote access points and may have exploited weak passwords or unpatched software. While no drinking water quality or supply was compromised, the attack forced several utilities to switch to manual operations as a precaution. The Cybersecurity and Infrastructure Security Agency is leading the technical analysis, working alongside the FBI and the Minnesota Department of Health.

The investigation is still in its early stages, and officials have not confirmed attribution. However, the focus on Iran follows a pattern of similar low-level intrusions against U.S. critical infrastructure in recent years. Iranian hacking groups have previously probed water systems, dams, and energy grids, often using relatively simple methods to test defenses.

Local officials say the affected systems serve small and mid-sized communities, and most have since restored normal operations. The incident has renewed calls for stronger security standards for public utilities, many of which rely on aging infrastructure and limited IT budgets. A formal statement from federal agencies is expected in the coming days, but no public warning has been issued to residents, as there is no indication of a direct threat to public safety.