A coordinated cyberattack disrupted control systems at more than 30 Minnesota water utilities. Here’s what happened, why drinking water remained safe, and what residents should watch for during recovery efforts.
Table of Contents
What Happened?
The attack affected operational technology, meaning computerized controls used to run wells, treatment plants, water towers, and other utility equipment.
Minnesota IT Services announced the wider incident on July 28 and activated the state’s cybersecurity response. State, local, and federal teams are helping affected communities investigate the attack and restore normal operations.
The Minnesota Department of Health said public health remained protected. The FBI also contacted affected communities and is assisting with the response.
Officials have not reported that customer information was stolen or leaked during this attack. However, cyberattacks can also involve data theft, and people may not always know when their information has appeared online.
Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
Who Was Affected and Was Any Data Leaked?
Braham, South St. Paul, Maple Plain, and Plymouth publicly reported problems involving water utility technology.
In Braham, attackers shut down computerized controls, which stopped the well and treatment plant. Crews restored the plant later that morning.
South St. Paul and Maple Plain used backup procedures to maintain water and wastewater services.
Plymouth reported communication problems at two water towers and several lift stations. Staff continued operating the system manually.
Officials said water quality and water levels remained safe. Residents were not asked to reduce use or change how they used drinking water.
Officials have not reported that personal customer information was stolen or leaked. Authorities also have not identified who carried out the attack.
Futureproof monitors your information for data leaks 24/7 and guides you with clear steps to keep it safer from scams.
Run a free checkHow Hackers Disrupted Minnesota Water Controls
Officials have not publicly explained exactly how attackers entered the utility systems.
Braham confirmed that unknown attackers shut down its computerized operating controls.
Plymouth said the problem affected equipment connected through cellular communications. However, officials have not confirmed the wider attack method.
Investigators are still checking which systems were reached, what damage occurred, and whether related cyber activity continues.

At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
