---
source_url: https://politifact.com/article/2026/jul/31/minnesota-water-cyber-attack-iran-blame-trump/
---

Trump blames Minnesota for water systems cyber attack, but experts say it’s too soon to dismiss Iran
Following cyber attacks on dozens of Minnesota water plants, President Donald Trump blamed the state and its Democratic governor, Tim Walz, ignoring that a federal cybersecurity agency recently warned that Iran could be targeting such systems.
At a July 31 [Cabinet meeting](https://x.com/cspan/status/2083234137071030691) at Camp David, the presidential retreat, Trump said, “I think that Minnesota is behind it. You know who is behind it? Minnesota, because they are grossly incompetent. I think the governor is behind it. I don’t think there was an Iranian cyberattack. I think that Minnesota needs to get its act together.”
However, on July 22, the federal Cybersecurity and Infrastructure Security Agency [warned](https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-097a) about “ongoing Iranian-affiliated cyber targeting” of devices that run critical infrastructure. A 2024 agency [warning](https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a) about Iranian cyber threats specifically cited water and wastewater systems.
In announcing the cyber intrusion, a Minnesota state agency [said](https://mn.gov/mnit/media/blog/?id=38-761869#/detail/appId/1/id/762209) most confirmed cases involved programmable logic controllers — the same pathway the federal agency had warned about. In addition, the FBI [announced](https://www.ic3.gov/PSA/2026/PSA260730.pdf) that at least seven states were also being hit by similar attacks, which calls into question why Minnesota would have been uniquely responsible for attacks in six other states. (The FBI did not specify the other states.)
We asked the White House for evidence that Minnesota was solely involved; a spokesperson referred us back to the president’s comments.
Experts said it is too soon to clear Iran of any responsibility and to assign Minnesota the entirety of the blame, as Trump did.
“Cyberattack attribution is typically very difficult and inherently uncertain,” said Vassil Roussev, director of Cyber Center at Louisiana State University New Orleans. “There are usually clues based on known methods, code and other attributes, but these could be imitated by a third party as well. This is similar to intelligence assessment — there is rarely complete certainty, only degrees of confidence.”
Utilities in at least seven states reported incidents to the FBI in July
On July 26 and 27, a coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems, Minnesota IT Services [said](https://mn.gov/mnit/media/blog/?id=761869) in a statement July 28. The state agency said it was investigating the breaches with federal agencies.
On July 30, the [FBI and the Environmental Protection Agency said](https://www.ic3.gov/PSA/2026/PSA260730.pdf) in a joint announcement that malicious cyber actors had conducted cyber attacks on water and wastewater utilities “in at least seven states” and that “some of that activity degraded water operations.”
After remotely accessing internet-facing devices, the actors changed the IP addresses and passwords, resulting in a loss of monitoring and control functionality, the FBI said. Operational effects reported to the FBI have included loss of pressure and flooding. [The Minnesota Star Tribune](https://archive.ph/XKNQf) reported that officials said the attacks did not affect the water quality and the drinking water is safe.
“Minnesota state officials have been briefed that Iran was likely responsible for the attack,” The [Minnesota Star Tribune](https://archive.ph/XKNQf) reported. [The New York Times](https://www.nytimes.com/2026/07/30/us/politics/minnesota-water-cyberattack-iran.html) cited U.S. and state officials and others familiar with the matter saying that preliminary information suggested the attack was probably the work of Iranian hackers.
Walz said in an [X post](https://x.com/govtimwalz/status/2083235434168021219?s=46) that “Trump knows exactly who is responsible for this attack, and knows that other states were hit too. This is what modern warfare looks like, and it further illustrates there’s no plan to win a war with Iran.”
CISA on July 30 [said](https://www.cisa.gov/news-events/alerts/2026/07/30/cisa-urges-water-and-wastewater-systems-sector-protect-ot-against-activity-targeting-plcs) that “these threat actors are targeting water entities of all sizes.”
Walz blamed the Trump administration for hampering state cyberdefense efforts, writing in an [X post](https://x.com/GovTimWalz/status/2083235436990705970) that DOGE, a federal cost cutting effort from 2025, “took an axe to CISA and left the U.S. exposed to cyber attacks.”
There is evidence that the Trump administration has [cut back on staffing and resources for CISA,](https://www.politico.com/news/2026/07/29/republicans-save-cisa-ai-elections-01014637) which handles cybersecurity in several areas including elections and infrastructure. Trump [fired the CISA director, Chris Krebs](https://politifact.com/factchecks/2020/nov/18/donald-trump/fact-checking-donald-trumps-tweet-firing-christoph/), after the agency affirmed the integrity of the 2020 election that Trump lost.
Cyber threats on critical infrastructure such as water systems are a legitimate ongoing concern, Roussev said.
Many such systems “rely on old automation technologies that were never designed with security in mind and are, by default, very vulnerable,” he said. Securing them “requires systematic planning, investments and constant vigilance. Any lapses are potentially exploitable by adversaries with the potential for mass effects in the physical world.”
Our Sources
Minnesota IT Services, [MNIT activates statewide cybersecurity response to support affected communities and protect critical infrastructure](https://mn.gov/mnit/media/blog/?id=761869), July 28, 2026
Minnesota IT Services,[Minnesota continues response to cyber activity affecting community water systems](https://mn.gov/mnit/media/blog/?id=38-761869#/detail/appId/1/id/762209), July 30, 2026
New York Times, [U.S. Sees Iran as Likely Behind Cyberattack on Minnesota Water Systems](https://www.nytimes.com/2026/07/30/us/politics/minnesota-water-cyberattack-iran.html), July 30, 2026
President Donald Trump, [C-SPAN X post](https://x.com/cspan/status/2083234137071030691), July 31, 2026
PolitiFact, [Fact-check: Trump officials’ statements about Alex Pretti’s fatal shooting by Border Patrol agents](https://politifact.com/article/2026/jan/26/fact-check-trump-official-noem-alex-pretti-death/), Jan. 26, 2026
PolitiFact, [Donald Trump wrong that 92% of Minnesota Somalis don’t work](https://politifact.com/factchecks/2026/feb/02/donald-trump/bongino-minnesota-somali-employment-poverty-benefi/), February 2, 2026
PolitiFact, [Fact-checking Donald Trump’s tweet firing Christopher Krebs](https://politifact.com/factchecks/2020/nov/18/donald-trump/fact-checking-donald-trumps-tweet-firing-christoph/), Nov. 18, 2020
PolitiFact,[ Trump officials tout Minnesota fraud charges. Most started before he took office](https://politifact.com/factchecks/2026/jan/08/pam-bondi/doj-minnesota-fraud-trump-biden-somalis/), Jan. 8, 2026
Cybersecurity and Infrastructure Security Agency, [Urgently warn about ongoing Iranian-affiliated cyber targeting](https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-097a), July 22, 2026
Cybersecurity and Infrastructure Security Agency, [IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors, Including US Water and Wastewater Systems Facilities](https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-335a), December 18, 2024
FBI and Environmental Protection Agency, [Joint announcement that malicious cyber actors had conducted cyber attacks on water and wastewater utilities](https://www.ic3.gov/PSA/2026/PSA260730.pdf), July 30, 2026
The Minnesota Star Tribune, [Officials said the attacks did not affect the water quality and the drinking water is safe](https://archive.ph/XKNQf), July 31, 2026
New York Times, [U.S. Sees Iran as Likely Behind Cyberattack on Minnesota Water Systems](https://www.nytimes.com/2026/07/30/us/politics/minnesota-water-cyberattack-iran.html), July 30, 2026
Gov. Tim Walz, [X post](https://x.com/govtimwalz/status/2083235434168021219?s=46), July 31, 2026
Cybersecurity and Infrastructure Security Agency, [CISA urges water and wastewater systems sector to protect OT against activity targeting PLCs](https://www.cisa.gov/news-events/alerts/2026/07/30/cisa-urges-water-and-wastewater-systems-sector-protect-ot-against-activity-targeting-plcs), July 30, 2026
Politico, [Republicans save CISA AI elections](https://www.politico.com/news/2026/07/29/republicans-save-cisa-ai-elections-01014637), July 29, 2026
Politico, [Kristi Noem pledged to boost the nation’s cybersecurity. She gutted it instead.](https://www.politico.com/news/2025/10/23/kristi-noem-cybersecurity-strategy-concerns-cisa-00619108), October 23, 2025
Politico Pro, [POLITICO Pro: States send out the ‘bat signal’ for help responding to cyber threats amid federal cuts](https://subscriber.politicopro.com/article/2025/09/states-cyber-response-federal-cuts-00582295), Sept. 26. 2025
Email interview with Vassil Roussev, director of Cyber Center at Louisiana State University at New Orleans, July 31, 2026