U.S. Investigators increasingly believe Iran may be responsible for a cyberattack that disrupted dozens of municipal water systems across Minnesota this week, according to officials familiar with the ongoing investigation.
While the investigation has not reached a final conclusion, authorities reportedly believe the evidence points toward Iranian involvement. Federal officials say the methods used in the intrusion, combined with the lack of any ransom demand, suggest the operation was designed to cause disruption rather than generate money.
The FBI said several indicators are consistent with previous Iranian cyber activity, including Tehran's growing interest in America's water infrastructure. "The FBI is aware of recent public reporting around Water and Wastewater (WWS) sectors," The agency wrote in a social media post. "The FBI is actively engaged with victims."
Investigators believe the hackers were focused on interrupting critical services instead of seeking a financial payoff. Although officials confirmed that no drinking water was contaminated, cybersecurity experts say the incident had the potential to become far more dangerous. Metro State cybersecurity professor Faisal Kalim noted that the attackers appeared to focus on operational technology - the systems responsible for controlling essential infrastructure such as pumps and electrical equipment. "OT deals with something called the industrial control system that actually controls these water pumps, wells, power sectors, and so on," Kalim said.
Authorities continue to examine the full scope of the breach. Minnesota IT Services said the investigation remains ongoing as officials evaluate the systems impacted in roughly 30 communities throughout the state.