U.S. investigating alleged Iranian cyberattack on Minnesota municipal water facilities, MNIT says

Minnesota Information Technology said it has issued an advisory after the United States began investigating whether Iran carried out a coordinated cyberattack affecting more than 30 municipal water facilities in the state. The advisory, released Tuesday, described the incident as containing details that may indicate possible Iranian involvement, and said the state is coordinating with federal partners.

MNIT said the investigation concerns attacks on municipal water facilities, a category of critical infrastructure where operational disruptions can affect public health and safety. The agency did not identify specific communities or specify what operational impacts occurred in the advisory described by The Hill.

The advisory states that MNIT is coordinating its investigation with federal agencies, including the Cybersecurity and Infrastructure Security Agency, as the federal inquiry evaluates the scope and nature of the intrusion. MNIT’s role, as described in the report, includes sharing details with federal cybersecurity officials and supporting affected facilities as investigations proceed.

According to The Hill, the federal review centers on whether the cyberattack activity includes information that points to Iranian hackers. The report did not say whether authorities have reached a conclusive attribution determination or whether any formal charges have been filed.

The incident also raises questions about how municipal utilities manage cybersecurity risk and incident response, particularly when attacks originate outside the United States. Officials involved in such investigations typically assess indicators of compromise, attempt to identify attack pathways, and determine whether systems were accessed, manipulated, or disrupted beyond initial intrusion.

For residents and local government customers, the practical effect of such investigations depends on whether any components were impacted, what remediation is required, and how quickly utilities can restore safe operations while ensuring that systems are fully hardened against follow-on activity.

MNIT’s advisory described coordination with federal agencies as part of the investigation process. Additional information could depend on how federal and state officials complete forensic review, finalize attribution findings, and determine whether additional guidance or security measures are needed for other facilities.