US probes possible Iranian cyberattack on Minnesota water systems

A U.S. cybersecurity agency has launched an investigation into a coordinated cyberattack that targeted more than 30 municipal water facilities across Minnesota. The Minnesota Information Technology (MNIT) agency issued an advisory on Tuesday, noting that the intrusion attempts involved sophisticated tactics and that the attack may have been carried out by Iranian hackers. MNIT said it is working closely with federal partners, including the Cybersecurity and Infrastructure Security Agency (CISA), to assess the scope of the breach and mitigate any potential impact on water treatment operations.

The advisory outlined that the attackers accessed network systems at multiple water utilities, attempting to modify operational parameters and exfiltrate data. While no evidence of physical damage or water contamination has been reported, MNIT urged affected municipalities to review their cybersecurity protocols, conduct thorough system scans, and report any anomalous activity to CISA. The investigation will focus on identifying the threat actors, determining whether the attack was part of a broader campaign, and evaluating whether any critical infrastructure controls were compromised.

Officials emphasize that the collaborative effort between state and federal agencies aims to protect essential public services and prevent future incidents. As the investigation continues, MNIT and CISA will provide updates on findings and recommended safeguards to ensure the resilience of Minnesota’s water supply infrastructure.