Roughly 30 water networks across Minnesota suffered cyberattacks on Sunday and Monday, prompting investigators and cybersecurity firms to suspect involvement from an Iranian-linked hacking group. The operation disrupted water supplies in the small town of Braham for roughly two hours before systems were restored, according to American media reports.
Cyberattacks Hit Minnesota Water Networks
Water networks across Minnesota faced coordinated digital intrusions at the start of the week. American media reports, citing investigators and a cybersecurity firm, revealed that approximately 30 water systems were targeted on Sunday and Monday. The disruption knocked out water supplies for about two hours in Braham, a small town located within the greater Minneapolis area, before normal service resumed.
Security analysts pointed to recognizable methods behind the breach. According to the cybersecurity company Tenable, the tactics deployed in the attacks match the operational signatures of CyberAv3ngers
, an electronic hacking gang that the United States government alleges is affiliated with Tehran. American authorities are actively investigating potential Iranian state involvement in the incidents.
Federal Warnings and Prior Digital Operations
The strikes on Minnesota infrastructure followed an official alert from Washington. On July 22, just days before the water systems were hit, the Cybersecurity and Infrastructure Security Agency issued a formal warning cautioning that organizations tied to Iran could target electronic control systems within critical American infrastructure.
This activity builds on a broader campaign of digital harassment attributed to groups connected to the region. Earlier in March, a hacking collective named Hanzala claimed responsibility for cyberattacks targeting two American enterprises: Stryker, a medical technology leader, and Verifone, which specializes in electronic payment devices and online transactions. While Stryker acknowledged the incident, Verifone denied suffering any breach.
In a statement regarding those March attacks, the Hanzala collective described its actions as retaliation for what it termed the brutal attack on Minab school. That reference pointed to a primary school in southern Iran struck during the opening day of a war that began on February 28 following joint American and Israeli strikes. Official Iranian media reported that the strike killed 73 boys, 47 girls, 26 teachers, seven relatives, a school bus driver, and one other adult. Meanwhile, the New York Times reported that an internal military investigation by the United States Army indicated the strike stemmed from erroneous coordinates used while targeting a nearby military base.
Investigation and Ongoing Security Scrutiny
As federal agencies review the digital fingerprints left across Minnesota’s water sector, authorities continue to navigate the intersection of physical infrastructure and state-backed cyber warfare. The Federal Bureau of Investigation could not be reached immediately by Agence France-Presse for comment regarding the ongoing probe into the Braham disruption.
With critical systems returning to service after brief operational halts, the primary focus remains on securing vulnerable supervisory control and data acquisition networks against sophisticated foreign actors whose methods continue to evolve alongside geopolitical tensions.
