President Donald Trump dismissed speculation that Iran was behind a recent cyberattack on Minnesota water systems, attributing the incident to state leadership.
During a Cabinet meeting at Camp David, Trump said the attack on about 30 water plants resulted from “gross incompetence” of Minnesota and its governor, labeling the governor as corrupt.
Officials have conducted a preliminary assessment indicating Iranian‑affiliated hackers may be responsible, a view that contrasts with Trump’s comments.
The cyberattack targeted operational technology at more than 30 community water systems, disrupting automated controls but not threatening drinking water quality.
In Braham, malicious software shut down well and treatment plant controls; in Plymouth and South St. Paul, operators shifted to manual control.
Minnesota IT Services has not yet identified a specific actor and the investigation remains ongoing.
Federal agencies warned days earlier that Iranian‑linked hackers were targeting water, power, and local government computer systems, noting previous disruptions and financial losses.
Past incidents show Iranian‑affiliated groups have breached U.S. water infrastructure, exploiting internet‑connected equipment with default or absent passwords.
In 2023, hackers linked to Iran’s Islamic Revolutionary Guard Corps accessed programmable controllers at several water and wastewater facilities, prompting utilities to move operations offline without compromising drinking water.
Earlier, an Iranian hacker was charged for accessing the control system of a small dam in New York, though the dam’s gate was manually disconnected at the time.
The Minnesota governor, a 2024 Democratic vice‑presidential candidate, has not been accused of wrongdoing in the water system attacks.
The incident underscores ongoing cybersecurity challenges for critical infrastructure and the need for robust protection measures.
