Minnesota IT Services (MNIT), the state agency responsible for providing information technology services to government entities, has confirmed that approximately 30 water utilities under its management were affected by a coordinated cyberattack. According to officials, the incident is believed to have been carried out by a state-sponsored threat actor, although the identity of the group or country behind the attack has not yet been officially determined.
Preliminary assessments suggest that the attack on few Minnesota Water Facilities may have originated from a foreign adversary with strained relations with the United States. However, authorities have not attributed the incident to any specific nation or organization, and investigations remain ongoing.
MNIT stated that the cyberattack occurred on July 26 and continued into the following day. The attackers reportedly targeted the operational technology (OT) systems that support the functioning of the affected water utilities. Despite the intrusion, officials emphasized that there has been no evidence of disruption to water services or any direct impact on consumers. Water treatment and distribution operations have continued without interruption, and public water supplies remain safe based on current assessments.
Given the suspected involvement of a state-sponsored actor, federal and state authorities have launched a comprehensive investigation to determine the origin, methods, and objectives of the attack. The investigation is being conducted in collaboration with multiple agencies, including the Federal Bureau of Investigation (FBI) and the Minnesota Department of Health. Cybersecurity specialists and incident response teams are working to assess the extent of the compromise, secure affected systems, and strengthen defenses against potential future attacks.
As part of the response, health officials are closely monitoring communities served by the impacted water utilities. Although there is currently no indication that the cyberattack resulted in water contamination or posed a health risk to residents, authorities are maintaining enhanced surveillance as a precautionary measure. Water quality testing and system inspections are continuing to ensure that public safety is not compromised.
Officials have reassured residents that no illnesses or health concerns linked to the incident have been reported. They also noted that the response teams remain prepared to take immediate action should any evidence of contamination or operational disruption emerge during the ongoing investigation.
The incident serves as another reminder of the growing cybersecurity threats facing critical infrastructure, particularly essential public services such as water treatment facilities. As cyberattacks targeting operational technology become increasingly sophisticated, government agencies and utility providers continue to invest in stronger security measures, rapid incident response capabilities, and interagency cooperation to safeguard vital infrastructure and protect the public.
Join our LinkedIn group Information Security Community!
