Story perspectives

Iran-Linked Hacks Force Manual Operation of Minnesota Water Systems

8/2/2026

Summary

Iran-linked Hackers Disrupt

Cyberattacks forced over 30 Minnesota water utilities to run manually on Sunday and Monday, locking operators out and prompting boil-water notices.
John Israel, Cynthia Kaiser and Joe Slowik said the attacks match Iran-linked tactics and led federal agencies to open a joint probe.
Service was restored within hours in Braham and Plymouth, with no water quality or supply compromised.

Summary

Industry Groups Sue

President Donald Trump blamed Minnesota Governor Tim Walz and the state for the water-system hacks, rejecting Iranian involvement.
Industry groups and three states sued the 2023 Biden-proposed water-utility cybersecurity audits, prompting an EPA rollback.
Industry groups say the required cybersecurity upgrades would strain the limited budgets of small and medium utilities.

Summary

FBI Alerts

The FBI advisory on July 27 reported disruptions in seven states, noting loss and flooding that could let untreated groundwater enter pipes.
Governor Walz said Government Efficiency’s cut to CISA funding “took an axe” and left the nation exposed to cyber attacks.
CISA received $2.6 billion for FY 2026, $200 million less than FY 2025, and seeks $2.4 billion for FY 2027.
The FBI, EPA and CISA are coordinating alerts and urging utilities to isolate programmable logic controllers.

History

Historical Context

On 23 December 2015 Russian-linked Sandworm used BlackEnergy malware to breach three Ukrainian power distributors, cutting electricity for about 230,000 customers for up to six hours and disabling roughly 73 MWh of supply. That grid attack showed how cyber tools could cripple services, a risk echoed in the July 2024 ransomware-style intrusion on Minnesota’s water utilities blamed on Iran-aligned actors and investigated by the FBI and EPA.

1 of 4

Iran-linked Hackers Disrupt

Cyberattacks forced over 30 Minnesota water utilities to run manually on Sunday and Monday, locking operators out and prompting boil-water notices.
John Israel, Cynthia Kaiser and Joe Slowik said the attacks match Iran-linked tactics and led federal agencies to open a joint probe.
Service was restored within hours in Braham and Plymouth, with no water quality or supply compromised.

1 / 4