A coordinated cyberattack targeted operational technology at more than 30 community water systems across Minnesota and at least six other US states over the weekend of 26–27 July 2026. Minnesota IT Services activated its state cybersecurity response and brought in federal agencies including the FBI, CISA and the EPA, which have linked the intrusion to Iran-affiliated threat actors and warned it forms part of a wider pattern of attacks on critical infrastructure. The incident underscores growing concern about the vulnerability of essential utilities to state-linked hackers.

One water treatment plant was temporarily taken offline, while other affected communities reported disruption to automated controls and communications equipment. Staff switched to manual operations and backup procedures to keep services running, and officials said there were no active requests for residents to reduce or change their drinking water use. The FBI has since confirmed that water or wastewater utility companies across seven states in total have been affected.