Iran-backed hackers likely behind attack that shut down Minnesota water plant — and they’re not done yet

Recent cyberattacks targeting U. S. water systems are believed to be linked to the Iran-backed hacker group known as the “Cyberav3ngers. ” Experts warn that these attacks may continue, posing significant risks to U. S. infrastructure.

1. Attack Origin and Identification:

Cyberattacks affecting water systems in seven states, including over 30 in Michigan, are linked to the Cyberav3ngers group. This group has ties to Iran's Islamic Revolutionary Guard Corps (IRGC).

The group began threatening U.S. water infrastructure online shortly after the escalation of conflict between the U. S. and Iran.

2. Nature and Impact of Attacks:

Attackers gained access to control systems and potentially interfered with water pumping operations. However, no major harm resulted, and systems were restored quickly.

Cybersecurity expert Chris Day noted that while disruptions occurred, there was no major escalation observed, though vigilance is necessary.

3. Attribution of Responsibility:

While Cyberav3ngers are suspected to be behind the attacks, no definitive proof exists linking them directly to the incidents.

Past patterns suggest that this group targets infrastructure of perceived enemies but remains opportunistic in leveraging system vulnerabilities.

4. Political Responses:

President Trump dismissed suggestions of Iranian involvement in the incidents, attributing the issues to the state’s governance instead. This sparked a political dispute, with Minnesota Governor Tim Walz accusing Trump of deflection.

5. Vulnerabilities in U. S. Infrastructure:

Cyberattacks expose vulnerabilities in U.S. infrastructure, raising concerns about potential widespread impacts in the future, such as blackouts and water supply failures.

Experts emphasize that cyber threats are ongoing, and the situation requires continuous monitoring.

The Cyberav3ngers’ attacks on U. S. water systems illustrate the growing threat of cyber warfare, especially from actors linked to state sponsors like Iran. Despite quick recovery from the recent attacks, continuous vigilance and improvement of cybersecurity defenses are essential to protect critical infrastructure in the face of potential future assaults.

https://nypost.com/2026/08/04/us-news/hackers-behind-minnesota-water-treatment-plant-attacks-are-likely-tied-to-iran/