Cyber FeedCyber incidents across IT, OT and crypto

All incidents

OTProcess manipulationConfirmed

Coordinated attack disrupts more than 30 Minnesota water systems

July 26, 2026 (July 26 to 27, 2026)

Between July 26 and 27, a coordinated cyberattack disrupted water and wastewater operations across more than 30 Minnesota communities, according to Tenable's summary. Some automated controls were affected and Maple Plain declared a local state of emergency. In Plymouth, only equipment connected over cellular links was hit and manual operation kept water flowing. Separately, cyber activity caused a pressure drop at the Clayton County Water Authority in Georgia, prompting a boil-water advisory for 300,000 customers, with service restored within hours. A federal investigation is pending and attribution is not confirmed, although the timing matches the Iran-linked controller activity in CISA's advisory. SecurityWeek reports that the FBI and EPA later said water systems in at least seven states were targeted.

Why it matters

Small utilities were hit at scale, and the ability to switch to manual operation is what limited the impact.

What defenders can take from it

  • Rehearse manual operation of pumps and valves.
  • Find every cellular modem and remote-access path to your controllers, including ones installed by vendors.

Sources