President Donald Trump rejected the idea that Iran was behind the Minnesota water hacks, even as federal cyber officials have warned that attacks on American infrastructure are spreading and similar activity has previously been tied to Iran.
Trump told reporters, according to Politico, “I don’t think there was an Iranian cyberattack,” and instead put blame on Minnesota Gov. Tim Walz. Politico reported that Trump did not provide evidence for that claim.
The FBI, the Environmental Protection Agency and the Cybersecurity and Infrastructure Security Agency have not made a formal public attribution for the Minnesota incidents. The Verge reported that Iran is still viewed as the likely actor behind the campaign, based on the broader pattern of activity and earlier federal links between similar attacks and Iran.
The immediate risk is not abstract. Water utilities run pumps, treatment controls and monitoring systems that increasingly depend on networked equipment. A cyberattack against a community water system can target the computers and industrial controls that help operators manage those functions, which is why even small municipal systems have become part of the national infrastructure security problem.
Who is behind the Minnesota water hacks?
No U.S. agency named in the reporting has formally said Iran carried out the Minnesota attacks. CISA has, however, linked similar attacks from earlier in the year to Iran, and federal officials have warned that the activity is moving beyond one state.
The FBI issued a warning that cyberattacks on U.S. infrastructure were spreading to other states. In Minnesota, at least 30 community water systems were targeted in what appeared to be a coordinated operation, according to reporting cited by The Verge.
That distinction matters because attribution in cyber incidents is usually slower than politics. Investigators look for infrastructure, tools, targets, timing and operational habits before naming a government or group. Trump skipped that process in public and pointed at Walz instead, while the federal agencies closest to the incident have stayed more cautious.
The broader context is the strained U.S.-Iran relationship during Trump’s second term. The Verge reported that Iran has been the target of an intermittent U.S. military conflict and, with limited military options, has repeatedly used digital operations and propaganda efforts against the Trump administration.
Trump has also repeatedly attacked Minnesota and Walz during his second term. He previously threatened to invoke the Insurrection Act against the state during an immigration enforcement surge there, according to the Associated Press and prior Verge reporting. That surge left multiple people dead, according to The Verge.
For Minnesota residents and water operators, the useful takeaway is narrower than the political fight: federal agencies are treating the incidents as part of a wider infrastructure threat, and the public attribution question remains unresolved. Trump’s claim about Walz has been reported without supporting evidence, while Iran remains the more serious lead discussed in the federal cyber context.
This story draws on original reporting from The Verge.