A coordinated cyberattack targeted more than 30 community water systems across Minnesota between July 26 and 27, prompting a statewide incident response involving Minnesota IT Services (MNIT), the FBI, CISA, and other federal partners. Authorities say there is no evidence that drinking water quality was affected, and residents do not need to change their water usage. Several municipalities, including Plymouth, South St. Paul, Maple Plain, and Braham, reported disruptions to operational technology (OT) systems. In Braham, attackers briefly shut down computerized operating controls at the water plant before crews restored operations. The incident highlights the growing threat to industrial control systems (ICS) and SCADA environments that manage critical infrastructure.

While investigators have not officially attributed the attacks, officials noted similarities to previous campaigns targeting U.S. water infrastructure. The incident comes just days after U.S. agencies warned that state-backed threat actors were actively targeting internet-connected industrial control systems.