Iran-Linked CyberAv3ngers Suspected in Attacks on Minnesota Water Systems
State officials activated a statewide response as crews switched to manual operations and confirmed water remained safe to drink.
- On July 26 and 27, a "coordinated cyberattack" disrupted operational technology at more than 30 Minnesota community water systems, prompting immediate activation of state cybersecurity response capabilities by Minnesota IT Services .
- Security researchers suspect the Iran-linked group CyberAv3ngers, which targets small municipal water facilities, may be responsible, though officials have not confirmed attribution for the attacks.
- Automated controls in Braham, Minnesota and Plymouth, Minnesota were disrupted, forcing utility crews to switch to manual procedures; water quality and safety remained unaffected during the outages.
- State and federal agencies are collaborating with MNIT to investigate the intrusion and strengthen defenses, with "water levels and water quality unaffected," according to officials.
- Cybersecurity experts warn of a "worrying expansion in Iran-linked critical infrastructure targeting" across the United States, with small municipal systems particularly vulnerable due to limited dedicated security resources.
16 Articles
16 Articles
Urgent warning over water system cyberattacks
The Trump administration is warning about potential cyberattacks after a senior law enforcement official told NBC News that a cyberattack on water systems in Minnesota had all the hallmarks of Iranian-backed hackers. NBC News’ Garrett Haake reports.
Iran-Linked Hackers Hit 36 Minnesota Water Systems, Human Workers Had To Save the Day
Automated controls at 36 municipal water systems across Minnesota were knocked offline in a coordinated cyberattack suspected to involve Iran-linked hackers, forcing human crews in towns such as Braham to isolate equipment and restart critical machinery by hand. It took roughly 90 minutes on Monday morning for staff in Braham, a town of around 1,700 people, to bring the local water plant back under manual control after its systems went dark, acc…
A cybersecurity company claims that the modus operandi of an attack on 30 local water supply networks in Minnesota on Sunday and Monday corresponds to that of a group of pirates affiliated with Iran, a finding shared by the US authorities according to several media reports.
💧 The weekend hackers came for the water
“Kim, my local water company was cyberattacked. This is frightening. What could happen if that attack wasn’t caught? How can I prepare for another one?” — Ashley in Minnesota Ashley, I’ve got you. First, what happened. From Sunday, July 26, to Monday, July 27, a coordinated attack hit more than 30 Minnesota community water systems. Plymouth, South St. Paul and Maple Plain got hit. In little Braham, the well and treatment plant computers went d…
Coverage Details
Bias Distribution
- 60% of the sources lean Left
Factuality
To view factuality data please Upgrade to Premium














