A coordinated cyberattack targeted operational technology at more than 30 community water and wastewater systems across Minnesota over a two-day period, state officials announced on Tuesday. Minnesota IT Services activated statewide cybersecurity incident response resources to assist affected municipalities, assess network impacts, and coordinate with federal law enforcement and regulatory partners.
The intrusions, which occurred between Sunday and Monday, affected technology infrastructure utilized by local water utilities. several municipalities, including Plymouth, South St. Paul, Maple Plain, and Braham, publicly disclosed cyber incidents targeting their systems. Local officials reported that the disruptions were minimal or rapidly contained by disconnecting affected equipment and shifting to manual operational controls, ensuring that drinking water quality and public services remained uninterrupted for residents.
Minnesota IT Services Assistant Commissioner and Chief Information Security Officer John Israel emphasized that attacks on critical infrastructure demand a synchronized, whole-of-government response. He stated that state IT personnel are working closely with local utilities to share real-time threat intelligence, support system remediation, and reinforce defensive measures to guard against future cyber threats.
Israel added that the rapid containment of the incident demonstrates the value of Minnesota's ongoing investments in cybersecurity infrastructure and interagency partnerships. According to state officials, the multi-agency response allowed local, state, and federal authorities to rapidly coordinate efforts, contain potential risks, and prevent severe disruptions to essential public services.
