Cyberattack Hits Water Systems in Seven States, Iran Suspected

So here's the deal: this week, hackers hit the computer systems that run water utilities in at least seven U.S. states, and Minnesota got hit hardest — more than 30 community water systems were affected there alone. Federal investigators, including the FBI, are trying to figure out if Iranian hackers are behind it, since Iran-linked groups have gone after U.S. water infrastructure before (they did something similar in 2023 by exploiting equipment that still had its default password — basically leaving the digital front door unlocked).

What actually happened technically: the attackers got into "operational technology" — the gear that controls things like pumps, water towers, and pressure — mostly through devices called programmable logic controllers, which are basically the remote-control brains of water infrastructure. In some cases nationwide, this caused a loss of monitoring and control capability, which led to pressure loss and even some flooding at certain sites. The good news for Minnesotans: officials say none of the actual drinking water supply was compromised, and there were no boil-water advisories. Some utilities had to switch to manual operations while they sorted things out — like going back to turning valves by hand instead of using computers.

Here's where it gets politically messy. Even though his own administration's investigators are actively probing an Iran connection, President Trump told his Cabinet on Friday that he doesn't buy it. Instead, he blamed Minnesota itself, calling the state "grossly incompetent" and taking a shot at Democratic Gov. Tim Walz, saying, "I think that Minnesota is behind it... I don't think there was an Iranian cyberattack." Walz fired back on social media, saying Trump "knows exactly who is responsible for this attack" and arguing that federal cuts to cybersecurity agencies (via DOGE) left the country more exposed.

Why should you care if you don't live in Minnesota? Because this isn't just a Minnesota story — the FBI says at least seven states were hit, though it hasn't named them. And the FBI, EPA, and the government's main cybersecurity agency (CISA) issued a joint warning that hackers are actively targeting internet-connected water system controllers nationwide, urging every water utility in the country to lock down their systems. So even if your tap water is fine right now, this is a wake-up call about how exposed basic infrastructure — the stuff that keeps your water running — can be to hackers, and how messy the response gets when politics gets mixed into a national security investigation before all the facts are even in.