WireJuly 31, 2026 at 2:01 PM
Loading the next story…
Cyberattacks disrupted the remote operational controls at more than 30 municipal water systems across Minnesota on Sunday and Monday, highlighting the vulnerability of critical American infrastructure to foreign digital incursions. The intrusions primarily targeted the supervisory control and data acquisition (SCADA) technology that allows utilities to monitor and manage equipment remotely.
In Braham, a city of 1,700 located 70 miles north of Minneapolis, the attack completely shut down the operating controls for the local well and water treatment plant. For a period on Monday, the city's water supply was reduced to what remained in the water tower, prompting officials to request residents minimize usage. Water quality was not compromised. In Plymouth, a suburban city of 80,000, officials restored communications by Tuesday afternoon and reported no disruption to water levels or quality as crews maintained manual operations.
Minnesota IT Services confirmed the breaches involved confirmed malicious activity, though not every impacted community experienced a service disruption. The FBI is leading the investigation and has not publicly identified the source of the attacks.
“Most of the confirmed attacks involved technology that water systems use to remotely monitor and control equipment,” a state agency spokesperson stated, noting similarities in timing and targeted technology across the incidents.
The incidents occurred just days after the FBI and the Cybersecurity and Infrastructure Security Agency issued a joint advisory warning that hackers linked to Iran have been actively targeting the operational controls of U.S. water and wastewater systems. Cynthia Kaiser, former deputy assistant director of the FBI’s cyber division, stated the circumstances point to Tehran. “Iran has the geopolitical motivations and a recent history of targeting water systems. When it walks like a duck and talks like a duck, it’s really important to call it out,” Kaiser said.
The financial burden of hardening these local systems consistently falls on American ratepayers, while federal resources are often diverted to foreign entanglements that provoke such attacks. These facilities remain soft targets precisely because they lack the funding for advanced cybersecurity, a cost domestic users cannot continue to absorb while national policy fails to deter state-sponsored aggression against civilian infrastructure.