Dark ReadingJai Vijayan
Minnesota Water Utility Attacks Expose Sector's Cyber-Risks
Part of the Minnesota story · since 29 Jul
- Wed 29 Jul, 08:12 UTC. SecurityWeek, first report. Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks.
- Wed 29 Jul, 14:40 UTC. The Hacker News, its first report on the story. Cyberattack hits Minnesota water systems, one plant taken offline.
- Wed 29 Jul, 19:50 UTC. Security Affairs, its first report on the story. Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline.
- Thu 30 Jul, 22:02 UTC. Dark Reading, its first report on the story. Minnesota Water Utility Attacks Expose Sector's Cyber-Risks. This article, 4th of 9.
- Thu 30 Jul, 22:31 UTC. SecurityWeek. CISA urges utilities to secure PLCs after Minnesota attack.
- Fri 31 Jul, 15:31 UTC. SecurityWeek. Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers.
- Sun 2 Aug, 09:01 UTC. Security Affairs. CISA urges removal of online PLCs after Minnesota water attacks.
- Mon 3 Aug, 09:11 UTC. SecurityWeek. Iranian hackers hit water plants in seven states, safety assured.
- Tue 11 Aug, 18:56 UTC. DataBreaches, its first report on the story. Judge Approves Data Rules for Change Healthcare Breach Deal.
A recent coordinated cyberattack targeted over 30 community water systems in Minnesota, reportedly linked to Iran-backed actors, highlighting vulnerabilities in the U.S. critical infrastructure. The attacks disrupted automated systems but did not majorly affect water supply or safety. These incidents followed a warning from CISA about Iran-affiliated threat groups targeting operational technology (OT) devices. Investigations are ongoing, with local and federal agencies involved.
Experts attribute the attacks' characteristics to the tactics of Iranian cyber groups, which typically focus on OT environments for geopolitical leverage rather than financial gain. The water industry remains a soft target due to uneven cybersecurity measures across systems.
How the story developed
9 articles from 5 outlets since 29 Jul. Quiet since 11 Aug. This was the 4th report, 2 days after the first.
- Wed 29 Jul, 08:12 UTC. SecurityWeek, first report. Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks.
- Wed 29 Jul, 14:40 UTC. The Hacker News, its first report on the story. Cyberattack hits Minnesota water systems, one plant taken offline.
- Wed 29 Jul, 19:50 UTC. Security Affairs, its first report on the story. Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline.
- Thu 30 Jul, 22:02 UTC. Dark Reading, its first report on the story. Minnesota Water Utility Attacks Expose Sector's Cyber-Risks. This article, 4th of 9.
- Thu 30 Jul, 22:31 UTC. SecurityWeek. CISA urges utilities to secure PLCs after Minnesota attack.
- Fri 31 Jul, 15:31 UTC. SecurityWeek. Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers.
- Sun 2 Aug, 09:01 UTC. Security Affairs. CISA urges removal of online PLCs after Minnesota water attacks.
- Mon 3 Aug, 09:11 UTC. SecurityWeek. Iranian hackers hit water plants in seven states, safety assured.
- Tue 11 Aug, 18:56 UTC. DataBreaches, its first report on the story. Judge Approves Data Rules for Change Healthcare Breach Deal.
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 9 articles as a listHide the list
- Wed 29 JulDay 03
- Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks08:12 · SecurityWeek · First report
- Cyberattack hits Minnesota water systems, one plant taken offline14:40 · The Hacker News
- Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline19:50 · Security Affairs
- Thu 30 JulDay 12
- Minnesota Water Utility Attacks Expose Sector's Cyber-Risks22:02 · Dark Reading · This article, 4th of 9
- CISA urges utilities to secure PLCs after Minnesota attack22:31 · SecurityWeek
- Fri 31 JulDay 21
Quiet for 2 days
Sun 2 AugDay 41- CISA urges removal of online PLCs after Minnesota water attacks09:01 · Security Affairs
- Mon 3 AugDay 51
- Iranian hackers hit water plants in seven states, safety assured09:11 · SecurityWeek
Quiet for 8 days
Tue 11 AugDay 131- Judge Approves Data Rules for Change Healthcare Breach Deal18:56 · DataBreaches · Picked up again