A coordinated Minnesota water utilities cyberattack hit more than 30 community water systems on Sunday, July 26, and Monday, July 27, forcing some operators to fall back on manual work and backup procedures while federal investigators moved in. Minnesota IT Services activated the state's cybersecurity response as crews tried to keep water moving and treatment equipment running.
The FBI said water or wastewater utility companies in seven states were affected, and that some of the activity degraded water operations. The attack focused on operational technology, or OT, the systems that control pumps, valves and treatment machinery. That is the part of a water system most people never see, but when it goes down, even briefly, local workers can lose the automatic controls they rely on to keep service steady.
That is why the search interest is spiking now: this was not a single utility problem, but a multi-state hit on critical infrastructure. In Minnesota, one water plant temporarily went offline. In Braham, city officials first said the plant had shut down for an unknown reason, then later said a malicious cyberattack against computerized operating systems caused the outage. Crews restored the facility within hours, and the city said it was again filtering and treating water as expected.
Elsewhere in the state, some communities reported trouble with automated controls or communications equipment. Plymouth said it had communications problems involving two water towers and several wastewater lift stations. Workers switched to manual operations or used backup procedures to keep essential services running. State officials also said there were no active requests for residents to reduce or change their drinking water use, even as crews worked through the disruptions.
The gap that remains is narrow but important: officials have not said which of the other states were hit or how the attackers got in. The FBI, CISA and the EPA are involved in the investigation, and the public record so far shows a system-wide warning more than a finished case. What it does show is that a coordinated cyberattack on OT was able to reach water systems across Minnesota and beyond, and force local utilities back to the most basic way of keeping water flowing.
