Overview
- State technology officials said a coordinated cyber operation targeted community water systems on July 26–27 and that investigators have identified more than 30 impacted utilities.
- The City of Braham reported attackers disabled computerized operating controls and briefly knocked its well and treatment plant offline, but city crews restored service and water quality was not affected.
- Other cities including Plymouth, South St. Paul and Maple Plain reported disruptions to automated controls or cellular-connected equipment and used manual workarounds to maintain operations.
- Minnesota IT Services activated a statewide incident response and is working with the BCA, FBI, CISA and federal partners to contain the incidents and investigate access methods while offering no formal attribution.
- Officials and experts warn the campaign highlights vulnerabilities in operational technology such as programmable logic controllers and cellular control links and say the incidents should drive more local investment in hardening and regular OT security checks.