Story perspectives

Iranian Hackers Target 30+ Minnesota Water Systems, Prompt Upgrade Calls

7/30/2026

Summary

Iranian Hackers Attack

The United States reported that Iranian hackers may have attacked more than 30 Minnesota municipal water systems this week.
Minnesota IT Services said the Sunday-Monday attacks targeted operational technology for pumps and power.
Assistant commissioner John Israel said MNIT is working with federal partners to share intelligence and restore utilities.
Officials in Plymouth, Braham, Maple Plain and South St. Paul switched to backups, used manual workarounds and reported no contamination.

Summary

Experts Warn

Experts warn securing operational technology will raise water rates as utilities must invest in new controls.
The attack revealed a shortage of engineers skilled in control-system and cybersecurity, with many retiring soon.
Braham’s mayor and Maple Plain’s city council called for vulnerability studies and emergency meetings to fund upgrades.
CISA’s advisory urging PLC isolation and modem-connection logging has prompted state agencies to allocate grant money for compliance training.

History

Historical Context

In June 2010 the United States and Israel deployed the Stuxnet worm against Iran’s Natanz uranium-enrichment plant, using Siemens SCADA exploits to damage roughly 1,000 centrifuges and infect about 60 % of Iranian computers. The attack proved that malware could destroy physical infrastructure, a lesson echoed today as Iranian hackers probe Minnesota’s water-system PLCs and CISA orders utilities to isolate such controls.

1 of 3

Iranian Hackers Attack

The United States reported that Iranian hackers may have attacked more than 30 Minnesota municipal water systems this week.
Minnesota IT Services said the Sunday-Monday attacks targeted operational technology for pumps and power.
Assistant commissioner John Israel said MNIT is working with federal partners to share intelligence and restore utilities.
Officials in Plymouth, Braham, Maple Plain and South St. Paul switched to backups, used manual workarounds and reported no contamination.

1 / 3