Cyberattack Targets Water Systems in Over 30 Minnesota Cities

A coordinated cyberattack targeted the operational technology of more than 30 community water systems across Minnesota between July 26 and 27, 2026. Minnesota IT Services (MNIT) activated a statewide cybersecurity incident response to contain the breach and support affected utilities. Early reports focused on four cities—Braham, South St. Paul, Plymouth, and Maple Plain—though the scale later expanded to over 30 municipalities.

In Braham, the attack temporarily shut down computerized controls at the water treatment plant, while Plymouth saw impacts to water towers and lift stations. Maple Plain declared a local emergency after attacks targeted utility support technology. South St. Paul and Maple Plain both reported that operations continued without interruption despite the breach. The Minnesota Department of Health confirmed as of Tuesday that no residents were asked to change their drinking water habits and public safety was not compromised.

State investigators are currently working with a multi-agency federal task force, including the FBI, the Cybersecurity & Infrastructure Security Agency (CISA), and the U.S. Environmental Protection Agency. The joint effort is focused on remediating systems, investigating the source of the attack, and strengthening critical infrastructure defenses.