Federal Warning Issued After Cyberattacks on Minnesota Water Systems

• •30 water plants in Minnesota were targeted by cyberattacks linked to potential Iranian actors.
• •CISA reported attackers are modifying PLCs to lock out operators, causing operational disruptions.
• •Federal authorities are investigating the incidents, urging water utilities to enhance cybersecurity.

The federal government issued a warning on September 12, 2026, regarding potential cyber threats to water systems following cyberattacks on 30 water plants in Minnesota. The Cybersecurity and Infrastructure Security Agency (CISA) reported that attackers are targeting programmable logic controllers (PLCs) and changing passwords to lock out operators, leading to boil water notices and manual operations. Investigations are underway to determine if the attacks are linked to Iran, with preliminary analyses ongoing. Minnesota IT Services confirmed that the attacks affected systems used for remote monitoring and control. No immediate changes to water use have been requested by localities, and CISA has advised water utilities to enhance their cybersecurity measures, including disconnecting PLCs from the internet. The FBI is aware of the intrusions but has not assigned responsibility for the attacks.