A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27.

Minnesota IT Services (MNIT) immediately activated the state's cybersecurity incident response capabilities and collaborated with federal, state, local, Tribal, and private-sector partners to investigate the attack, support affected communities, and strengthen the security of Minnesota's critical infrastructure.

As MNIT cybersecurity teams assess the cyber impacts, they are sharing threat intelligence, providing guidance on response efforts and best practices, and helping affected utilities contain, investigate, and remediate damages from the attack. MNIT is working closely with Minnesota Department of Public Safety, Bureau of Criminal Apprehension's Minnesota Fusion Center, Minnesota Department of Health, Minnesota Pollution Control Agency, Cybersecurity and Infrastructure Security Agency, U.S. Environmental Protection Agency, Federal Bureau of Investigation, and local water utilities throughout the response.

The investigation remains active, and responders continue to assess affected systems. The Minnesota Department of Health continues to work directly with affected water systems to help ensure public health remains protected. Currently, they are not aware of any active requests from Minnesota cities to have their residents modify their drinking water usage.

MNIT will continue working with its partners to investigate the incident, support recovery efforts, strengthen cybersecurity protections, and help ensure Minnesota's critical infrastructure remains secure and resilient. Additional information will be shared as it becomes available.