Trump blames Minnesota incompetence for water cyberattacks amid attribution dispute
Trump blames Minnesota for cyberattacks; Walz disputes the claim.
Event / Security
Cyberattacks targeting water system operational controls across multiple US states, with federal agencies investigating Iranian involvement and political dispute over attribution.
2026-08-14 to 2026-11-11 · UTC publication dates
Coverage begins 1 Aug, 00:18 UTC
Follow the documented timeline or explore the related reporting.
The FBI, Cybersecurity and Infrastructure Security Agency, and other federal agencies issued an advisory warning that Iranian hackers have been targeting water and wastewater systems and the operational controls of other critical infrastructure sectors. The FBI did not publicly identify a culprit but emphasized they are investigating.
Governor Tim Walz (D-MN) responded on social media to President Trump's claims, stating that Trump knows exactly who is responsible for the attacks and knows that other states were also impacted.
The city of Braham, Minnesota (population 1,700, located about 70 miles north of Minneapolis) experienced a water plant outage on Monday when attackers shut down the operating controls for the well and water treatment plant. The city temporarily asked residents to minimize water use. The outage caused no water quality issues.
During a Cabinet meeting at Camp David on Friday, President Donald Trump claimed without evidence that recent cyberattacks in Minnesota were the fault of the state and Democratic Governor Tim Walz, rather than Iran. Trump stated Iran had bigger problems than worrying about Minnesota and criticized the state's competence.
Plymouth, Minnesota (population approximately 80,000, located outside Minneapolis) experienced a cyberattack affecting its water infrastructure communications. Officials reported that water infrastructure communications were restored by Tuesday afternoon.
Cyberattacks targeted over 30 water systems in Minnesota and nine water systems in Michigan. The attacks involved attempts to tamper with operational technology at water systems, specifically targeting remote monitoring and control equipment. All systems continued to operate safely with no known public health impacts, though some systems experienced temporary service disruptions.
Braham Mayor Nate George stated that federal and local officials suspect Iran is the likely culprit of the cyberattacks, though officials are reluctant to say so publicly. He emphasized that IT infrastructure upgrades are very costly, particularly challenging for small municipalities.
In 2016, the Justice Department charged a group of Iranian hackers in connection with a cyberattack targeting a small dam near New York City, establishing a historical pattern of Iranian interest in water system operations in the United States.
During a Cabinet meeting at Camp David on July 31, President Donald Trump stated he does not believe Iran is responsible for the cyberattacks on Minnesota water systems. Trump blamed Minnesota state officials and Governor Tim Walz for the incident, claiming the state is 'grossly incompetent.' He stated Iran has 'bigger problems than worrying about Minnesota' and offered no evidence to support his attribution to state officials.
A coordinated cyberattack targeted over 30 municipal water systems in Minnesota on July 26 and 27. The attacks affected operational technology and programmable logic controllers (PLCs) used by community water utilities to remotely monitor and control equipment. Minnesota officials confirmed there was no indication the state's drinking water supply was compromised.
Iranian-affiliated hackers have targeted U.S. water systems for years with varying levels of success. In 2016, the Justice Department charged a group of Iranian hackers in connection with a cyberattack targeting a dam near New York City. The U.S. Environmental Protection Agency previously warned of cyber threats to water and wastewater systems from foreign groups including Iran's Islamic Revolutionary Guard Corps and state-sponsored groups linked to Russia and China.
Multiple U.S. and Minnesota officials told media outlets that investigators believe the coordinated cyberattack on Minnesota water systems was probably conducted by Iranian hackers. A Minnesota Fusion Center memo indicated the attacks were aligned with an allegedly Iran-linked cyber-sabotage campaign. However, no federal agency has publicly attributed the attack to Iran, and officials cautioned that assessments remain preliminary. Investigators are also examining whether perpetrators may have sought to make the activity appear Iranian in origin.
The Cybersecurity and Infrastructure Security Agency (CISA) issued warnings that Iranian hackers have been targeting programmable logic controllers and changing passwords to lock operators out of critical infrastructure systems. A July 22 advisory expanded targeting scope to include devices manufactured by Rockwell Automation, Schneider Electric, Siemens, and potentially other manufacturers.
The FBI informed state officials that at least seven U.S. states were affected by coordinated cyberattacks targeting water systems, though Minnesota drew significant attention due to the scale and prominence of the incident.
Minnesota Governor Tim Walz responded to Trump's statements via social media, asserting that Trump knows exactly who is responsible for the attack and noting that other states were also affected. Walz characterized the incident as modern warfare and argued the Trump administration's Department of Government Efficiency gutted the Cybersecurity and Infrastructure Security Agency, leaving the U.S. exposed to cyberattacks.
Trump blames Minnesota for cyberattacks; Walz disputes the claim.
FBI and CISA warn Iranian hackers are targeting U.S. water systems, citing documented history of attacks.
Water systems restore operations; funding gaps hinder cybersecurity resilience.
Trump and Walz publicly dispute Iranian attribution claims for Minnesota water cyberattacks.
Investigators suspect Iranian hackers targeted 30+ Minnesota water systems in multi-state cyberattack.