CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Multiple water facilities in Minnesota attacked; Iranian hackers may be responsible

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 3357

As cited

Copy frozen at (site build).

breaches incidents

Multiple water facilities in Minnesota attacked; Iranian hackers may be responsible

Iran-linked hacking group Handala claimed attacks on water utilities in Minnesota and Maryland in June and July. No evidence emerged of actual tampering with water supplies, but the group threatened to escalate operations against U.S. critical infrastructure.

Why it matters: Water utility operators and critical infrastructure defenders need to assess their defensive posture against nation-state-aligned attackers and validate SCADA/ICS systems remain uncompromised despite intrusion activity.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

Multiple water facilities in Minnesota attacked; Iranian hackers may be responsible

Iran-linked Handala claimed responsibility for cyberattacks against multiple U.S. water facilities, including California Water and Maryland operations, between mid-June and late July 2026. The group publicly warned of escalating attacks on American critical infrastructure, though no evidence emerged of tampering with water supplies during the reported incidents.

Why it matters: Water utility operators and critical infrastructure defenders must assess their exposure to Iranian state-linked threat actors and review defensive posture against attacks targeting supervisory control and data acquisition (SCADA) systems and operational technology networks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary