Minnesota IT Services: More than 30 Minnesota community water systems hit by “coordinated cyberattack”

Cyberattack Targets Over 30 Minnesota Water Systems in Coordinated Incident

A coordinated cyberattack struck operational technology at more than 30 community water systems across Minnesota on July 26 and 27, prompting an immediate response from Minnesota IT Services (MNIT). The agency activated the state’s cybersecurity incident response protocols, collaborating with federal, state, local, Tribal, and private-sector partners to assess and mitigate the impact.

While the investigation remains ongoing, MNIT has not disclosed which specific communities were affected. Authorities report no current disruptions to drinking water safety, with no advisories issued for residents to alter water usage.

MNIT emphasized the attack underscores the need for robust cybersecurity measures, noting that the state’s preparedness enabled a rapid, multi-agency response. Efforts include threat intelligence sharing, system recovery support, and monitoring for further malicious activity. The incident highlights vulnerabilities in critical infrastructure, with responders working to restore operations and bolster defenses against future threats.

Source: https://www.kttc.com/2026/07/28/more-than-30-minnesota-community-water-systems-hit-by-coordinated-cyberattack/

Minnesota IT Services cybersecurity rating report: https://www.rankiteo.com/company/minnesota-it-services

"id": "MIN1785278058",
"linkid": "minnesota-it-services",
"type": "Cyber Attack",
"date": "7/2026",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"

{'affected_entities': [{'industry': 'Critical Infrastructure',
                        'location': 'Minnesota, USA',
                        'name': 'Minnesota community water systems',
                        'size': '>30 systems',
                        'type': 'Water utility'}],
 'customer_advisories': 'No advisories issued for residents to alter water '
                        'usage',
 'date_detected': '2024-07-26',
 'description': 'A coordinated cyberattack struck operational technology at '
                'more than 30 community water systems across Minnesota on July '
                '26 and 27, prompting an immediate response from Minnesota IT '
                'Services (MNIT). The agency activated the state’s '
                'cybersecurity incident response protocols, collaborating with '
                'federal, state, local, Tribal, and private-sector partners to '
                'assess and mitigate the impact.',
 'impact': {'systems_affected': 'Operational technology at water systems'},
 'investigation_status': 'Ongoing',
 'lessons_learned': 'The incident underscores the need for robust '
                    'cybersecurity measures in critical infrastructure.',
 'post_incident_analysis': {'corrective_actions': 'Bolster defenses against '
                                                  'future threats'},
 'references': [{'source': 'MNIT Statement'}],
 'response': {'enhanced_monitoring': 'Yes',
              'incident_response_plan_activated': 'Yes',
              'remediation_measures': 'Threat intelligence sharing, system '
                                      'recovery support, and monitoring for '
                                      'further malicious activity',
              'third_party_assistance': 'Federal, state, local, Tribal, and '
                                        'private-sector partners'},
 'title': 'Coordinated Cyberattack on Minnesota Water Systems',
 'type': 'Cyberattack'}