A cyberattack that impacted more than 30 community water systems across Minnesota this week may have been caused by Iran, according to a new report.
The New York Times reported Thursday that state and federal investigators told the paper the issues were “probably” caused by Iranian hackers.
5 EYEWITNESS NEWS has reached out to multiple state and federal officials for additional updates on the cyberattacks but hasn’t yet heard back.
It comes as the U.S. and Iran continue to trade strikes and have struggled to reach a deal to end the war. While the cyberattacks didn’t cause any water safety issues, according to state and local leaders, the attack could further escalate tensions between the countries if the link is confirmed.
The investigation remains active.
What we know
Minnesota IT Services (MNIT) said the attacks on Sunday and Monday targeted “operational technology.” No ransom was detected, and service to residents continued.
On Thursday, MNIT told 5 EYEWITNESS NEWS, “We are not attributing this activity to a specific threat actor at this time. Federal partners are best positioned to assess this incident alongside broader national and international threat intelligence and determine whether it may be linked to a particular actor. We continue to support the investigation and do not want to speculate while that work remains underway. Federal partners should address questions about any potential attribution.”
The agency didn’t disclose which communities were affected, citing state law, a handful of cities notified the public that they were impacted, including Plymouth, Braham, Maple Plain and South St. Paul.
RELATED: State: More than 30 water systems targeted in cyberattack
All of those localities, some with state help, were able to switch to backup plans and resolve any issues without any real disruption to public water service.
The state says it is working with local, tribal and federal officials to investigate the incident. Law enforcement, including the Minnesota Bureau of Criminal Apprehension and the FBI, are also working to determine what happened.
“Cyberattacks against critical infrastructure require a coordinated, whole-of-government response,” said John Israel, MNIT assistant commissioner and Minnesota chief information security officer. “MNIT is working side by side with our partners to share intelligence, support affected communities, and help utilities restore operations safely while strengthening defenses against future attacks.”
5 EYEWITNESS NEWS continues to work to confirm additional information about the attacks and will provide more updates as soon as possible.
This is a breaking news story. Get more updates from 5 EYEWITNESS NEWS by downloading the KSTP app below and following KSTP on social media.
For Related Stories: Cyberattack Iran Technology