Feds probe cyberattacks that hit Minnesota water systems

Federal authorities on Thursday warned that hackers were targeting electronic equipment used to operate critical infrastructure such as city water plants. More than 30 community water systems across Minnesota faced a coordinated cyberattack earlier in the week. Cyber defense agencies noted a significant increase in hackers targeting water and wastewater systems, and U.S. investigators are looking into possible connections between the attacks and Iran.

Water and wastewater utility companies in at least seven states reported incidents since July 27, the FBI said in a statement. Water operations have lost pressure and experienced flooding, which could allow untreated groundwater to seep into pipes, the bureau warned. Hackers targeted automated computers that control the water systems and changed the passwords to lock out the operators, according to the FBI.

The Cybersecurity and Infrastructure Security Agency, known as CISA, warned earlier this month of ongoing cyber exploitation across multiple critical infrastructure sectors by Iranian-affiliated actors. Such actors routinely target poorly secured U.S. networks and internet-connected devices, CISA warned.

President Donald Trump seemed to downplay the cyberattacks, saying at Camp David on Friday that he didn’t think the attack came from Iran, but was instead caused by Minnesota’s gross incompetence. He added that Iran had bigger problems than Minnesota’s water system.

Minnesota’s information technology agency said its investigation remained active with no actor yet identified. However, the investigators identified similarities among the incidents, including their timing and the types of technology involved.

The United States operates about 152,000 public drinking water systems, including 50,000 community water systems and over 16,000 wastewater treatment systems. These provide potable water to over 80% of the U.S. population, according to CISA.