Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

A coordinated cyberattack impacted over 30 Minnesota community water systems on July 26–27, 2026, disrupting operational technology including automated controls and communications infrastructure. Multiple plants reported outages or degraded operations, with Braham's water treatment facility going offline and Maple Plain declaring a local state of emergency. The attack exhibited common tactics across targets, such as access methods and timing, suggesting a coordinated campaign. While no specific vulnerability or malware was confirmed, the activity aligns with known tradecraft of Iranian-affiliated threat group CyberAv3ngers, which has previously targeted industrial control systems using programmable logic controllers and human-machine interfaces.

AI-extracted · verify before operational use