Event / Security

US Water Systems Cyberattack

← All events

Updated

Cyberattacks targeting water system operational controls across multiple US states, with federal agencies investigating Iranian involvement and political dispute over attribution.

6 reported locations
Geography of the reported facts
  1. Minnesota, United States
  2. Braham, Minnesota, United States
  3. Davis, Mount Airy, Maryland, United States
  4. Plymouth, Minnesota, United States
  5. New York, New York, United States
  6. United States

The story so far

Daily activity

0 articles
0 articles

2026-08-14 to 2026-11-11 · UTC publication dates

Coverage begins 1 Aug, 00:18 UTC

Follow the documented timeline or explore the related reporting.

What happened

The facts
  1. FBI and CISA warn of Iranian hackers targeting water systems

    The FBI, Cybersecurity and Infrastructure Security Agency, and other federal agencies issued an advisory warning that Iranian hackers have been targeting water and wastewater systems and the operational controls of other critical infrastructure sectors. The FBI did not publicly identify a culprit but emphasized they are investigating.

    1 corroborating report

  2. Minnesota Governor Walz responds to Trump's cyberattack claims

    Governor Tim Walz (D-MN) responded on social media to President Trump's claims, stating that Trump knows exactly who is responsible for the attacks and knows that other states were also impacted.

    1 corroborating report

  3. Braham water plant temporarily offline due to cyberattack

    The city of Braham, Minnesota (population 1,700, located about 70 miles north of Minneapolis) experienced a water plant outage on Monday when attackers shut down the operating controls for the well and water treatment plant. The city temporarily asked residents to minimize water use. The outage caused no water quality issues.

    1 corroborating report

  4. Trump claims Minnesota cyberattacks result from state incompetence, not Iran

    During a Cabinet meeting at Camp David on Friday, President Donald Trump claimed without evidence that recent cyberattacks in Minnesota were the fault of the state and Democratic Governor Tim Walz, rather than Iran. Trump stated Iran had bigger problems than worrying about Minnesota and criticized the state's competence.

    1 corroborating report

  5. Plymouth water infrastructure communications restored after cyberattack

    Plymouth, Minnesota (population approximately 80,000, located outside Minneapolis) experienced a cyberattack affecting its water infrastructure communications. Officials reported that water infrastructure communications were restored by Tuesday afternoon.

    1 corroborating report

  6. Cyberattacks target water systems in Minnesota and Michigan

    Cyberattacks targeted over 30 water systems in Minnesota and nine water systems in Michigan. The attacks involved attempts to tamper with operational technology at water systems, specifically targeting remote monitoring and control equipment. All systems continued to operate safely with no known public health impacts, though some systems experienced temporary service disruptions.

    1 corroborating report

  7. Braham mayor highlights cybersecurity infrastructure funding challenges

    Braham Mayor Nate George stated that federal and local officials suspect Iran is the likely culprit of the cyberattacks, though officials are reluctant to say so publicly. He emphasized that IT infrastructure upgrades are very costly, particularly challenging for small municipalities.

    1 corroborating report

  8. Justice Department charged Iranian hackers in 2016 dam cyberattack

    In 2016, the Justice Department charged a group of Iranian hackers in connection with a cyberattack targeting a small dam near New York City, establishing a historical pattern of Iranian interest in water system operations in the United States.

    1 corroborating report

  9. President Trump rejects Iranian attribution for Minnesota cyberattacks

    During a Cabinet meeting at Camp David on July 31, President Donald Trump stated he does not believe Iran is responsible for the cyberattacks on Minnesota water systems. Trump blamed Minnesota state officials and Governor Tim Walz for the incident, claiming the state is 'grossly incompetent.' He stated Iran has 'bigger problems than worrying about Minnesota' and offered no evidence to support his attribution to state officials.

    1 corroborating report

  10. Cyberattack targets over 30 municipal water systems in Minnesota

    A coordinated cyberattack targeted over 30 municipal water systems in Minnesota on July 26 and 27. The attacks affected operational technology and programmable logic controllers (PLCs) used by community water utilities to remotely monitor and control equipment. Minnesota officials confirmed there was no indication the state's drinking water supply was compromised.

    1 corroborating report

  11. Iran-linked hackers have history of targeting U.S. water systems

    Iranian-affiliated hackers have targeted U.S. water systems for years with varying levels of success. In 2016, the Justice Department charged a group of Iranian hackers in connection with a cyberattack targeting a dam near New York City. The U.S. Environmental Protection Agency previously warned of cyber threats to water and wastewater systems from foreign groups including Iran's Islamic Revolutionary Guard Corps and state-sponsored groups linked to Russia and China.

    1 corroborating report

  12. U.S. investigators suspect Iranian hackers conducted Minnesota water system cyberattack

    Multiple U.S. and Minnesota officials told media outlets that investigators believe the coordinated cyberattack on Minnesota water systems was probably conducted by Iranian hackers. A Minnesota Fusion Center memo indicated the attacks were aligned with an allegedly Iran-linked cyber-sabotage campaign. However, no federal agency has publicly attributed the attack to Iran, and officials cautioned that assessments remain preliminary. Investigators are also examining whether perpetrators may have sought to make the activity appear Iranian in origin.

    1 corroborating report

  13. CISA warns of Iranian hackers targeting water system controls

    The Cybersecurity and Infrastructure Security Agency (CISA) issued warnings that Iranian hackers have been targeting programmable logic controllers and changing passwords to lock operators out of critical infrastructure systems. A July 22 advisory expanded targeting scope to include devices manufactured by Rockwell Automation, Schneider Electric, Siemens, and potentially other manufacturers.

    1 corroborating report

  14. At least seven U.S. states affected by coordinated cyberattacks on water systems

    The FBI informed state officials that at least seven U.S. states were affected by coordinated cyberattacks targeting water systems, though Minnesota drew significant attention due to the scale and prominence of the incident.

    1 corroborating report

  15. Minnesota Governor Walz disputes Trump's blame for cyberattacks

    Minnesota Governor Tim Walz responded to Trump's statements via social media, asserting that Trump knows exactly who is responsible for the attack and noting that other states were also affected. Walz characterized the incident as modern warfare and argued the Trump administration's Department of Government Efficiency gutted the Cybersecurity and Infrastructure Security Agency, leaving the U.S. exposed to cyberattacks.

    1 corroborating report

Read the coverage