President Donald Trump rejected U.S. intelligence suspicions that Iran orchestrated a late-July cyberattack on more than 30 municipal water systems in Minnesota. Speaking at Camp David on July 31, Trump instead blamed state leadership for incompetence, directly contradicting federal investigative memos and state intelligence assessments linking the hacks to Tehran.
Contradictory Assessments on the Source of the Minnesota Water System Hacks
U.S. intelligence agencies and state-level investigators initially pinned the July 26 and 27 cyber intrusions on Iranian-linked actors. A memo from the Minnesota Fusion Center noted that the tradecraft and absence of ransom demands aligned with ongoing cybersabotage campaigns. National news outlets, including the New York Times and the Washington Post, reported that federal investigators tentatively concluded the attacks were the work of Iranian hackers operating five months into the U.S.-Iran war.
Despite those findings, President Donald Trump dismissed the possibility of foreign state-sponsored involvement during a July 31 cabinet meeting at the Camp David presidential retreat in Maryland. He offered no evidence for his counter-claim.
“We heard in Minnesota there was a cyberattack, and they blame it on Iran. I don’t think so. I think I blame it on Minnesota because they’re grossly incompetent,”
Donald Trump, U.S. President
Trump doubled down when pressed by reporters, asserting that Minnesota bore responsibility for the operational failures. The assertions run counter to a July 22 report from seven U.S. government agencies—including the FBI, NSA, EPA, and CISA—which warned that Iranian-affiliated hackers had systematically targeted internet-facing programmable logic controllers used in critical water and wastewater infrastructure.
Operational Impact on Municipal Water Utilities Across Multiple States
The cyberattacks struck operational technology across more than 30 municipal water systems in Minnesota, forcing local operators to switch their equipment from automated to manual monitoring modes. According to Minnesota IT Services, the state technology agency, the malicious activity compromised equipment used to remotely track water facility operations.
The scope of the disruption extended far beyond the Midwest. The FBI confirmed that similar incidents had impacted at least seven states starting July 27, in some cases degrading water operations and prompting local utilities to issue precautionary boil-water advisories. State officials noted that despite the operational disruptions, no active requests remained in place requiring residents to modify their drinking water consumption.
Governor Tim Walz Responds to the White House Accusations
Minnesota Governor Tim Walz fired back at the president’s remarks through statements on social media and public releases, accusing the administration of ignoring the reality of modern state-sponsored cyber warfare.
“Trump knows exactly who is responsible for this attack, and knows that other states were hit too,” Walz said in a statement in response to the president’s remarks. “This is what modern warfare looks like, and it further illustrates there’s no plan to win a war with Iran.”
Gov. Tim Walz, via Reuters
Walz also blamed the Department of Government Efficiency, the federal spending-reduction agency previously led by tech executive Elon Musk, for weakening national cyber defenses. Walz asserted that the cuts took an axe to CISA and left critical infrastructure exposed, praising local technical experts for identifying vulnerabilities and stopping the threat swiftly.
Unresolved Security Questions and Federal Response
Federal agencies have not officially attributed the final source of the Minnesota intrusion. The Cybersecurity and Infrastructure Security Agency stated it is actively coordinating with the Environmental Protection Agency and private industry partners to evaluate the extent of the damage. Meanwhile, the FBI maintains that its partners are well-equipped to protect against cyber threats of all varieties.
With federal investigators divided publicly from the White House over foreign attribution, state-level investigations remain active as utilities nationwide work to secure industrial control systems against ongoing remote tampering.
Related reading
