A coordinated cyberattack on operational technology systems targeted over 30 water utilities in Minnesota on July 26 and 27, prompting investigations by state and federal agencies. Affected cities, including Maple Plain, Braham, South St. Paul, and Plymouth, reported impacts on automated control functions, but drinking water remained safe. The City of Braham temporarily offline its water plant during the incident.
While the origins of the attack are unclear, investigators are examining links to Iranian threat groups, noting vulnerabilities in cellular communication systems as potential entry points. Experts emphasized the importance of assessing risks in remote equipment communications to prevent similar attacks in the future.