Investigators believe Iranian hackers are likely behind cyberattack on Minnesota water systems: report

U.S. investigators believe a cyberattack that targeted dozens of water systems in Minnesota this week likely was orchestrated by Iranian hackers, a report said.

Minnesota IT Services (MNIT) said the "coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems" on Sunday and Monday, but the Minnesota Department of Health is "not aware of any active requests from Minnesota cities to have their residents modify their drinking water usage."

U.S. and state officials and others familiar with the incident told The New York Times that Iranian hackers were likely behind the cyberattack.

The newspaper reported that three state officials briefed on an investigation into the cyberattack said the tradecraft used and the absence of a ransom demand led analysts to initially determine Iran was involved. Officials also cautioned that the assessment could change as more data is collected by investigators, according to the newspaper.

"The FBI is aware of recent public reporting around Water and Wastewater sectors. The FBI and our interagency partners are fully engaged to protect critical infrastructure and we remain well-equipped to protect against cyber threats of all varieties," the FBI said in a statement to Fox News Digital on Friday.

IRAN-LINKED HACKERS TARGET US MEDICAL TECH COMPANY

The newspaper reported that the hackers targeted infrastructure used to manage and monitor water towers operated by municipal governments.

The mayor of the city of Braham, Nate George, said on Monday, a "plant operator found that the water tower was calling for water, but the well was not operating."

"After learning that similar problems were occurring in at least four other Minnesota communities, Braham staff determined that the plant’s computerized control system had been compromised," he continued.

"Public works isolated the affected system, restored a backup, and restarted the plant within approximately 90 minutes. While the plant was offline, residents continued receiving water from the city’s water tower. City administration temporarily requested that residents conserve water to prevent the tower’s limited supply from being exhausted," George added.

In a statement shared with Fox News Digital, MNIT noted that "the investigation remains active, and Minnesota has not attributed the activity to a specific actor."

MNIT said it "continues to collaborate with federal, state, local, Tribal, and private-sector partners to investigate the attack, support affected communities, and strengthen the security of Minnesota's critical infrastructure."

"Cyberattacks against critical infrastructure require a coordinated, whole-of-government response," John Israel, MNIT assistant commissioner and Minnesota chief information security officer, said in a statement. "MNIT is working side by side with our partners to share intelligence, support affected communities, and help utilities restore operations safely while strengthening defenses against future attacks."

LIVE UPDATES ON IRAN WAR: TRUMP ANNOUNCES HAMAS DISARMAMENT DEAL WHILE SAUDI ARABIA LAUNCHES RED SEA DEFENSE COALITION

Israel told the Times that the breach was first detected Sunday and that hackers targeted 36 municipal water systems.

"Minnesota was one of the early detectors of this, but we’re seeing that this same threat activity has likely been occurring in other states throughout the nation," he was quoted as saying.

Nick Andersen, the Cybersecurity and Infrastructure Security Agency’s (CISA) acting director, told the newspaper that the agency was aware of "multiple potential incidents affecting local water utilities."

In the days leading up to the incident, CISA issued an advisory warning U.S. organizations of "ongoing Iranian-affiliated cyber activity targeting internet-connected operational technology (OT) devices."

"Iranian cyber actors continue to target U.S. critical infrastructure, and the FBI is committed to identifying, disrupting, and imposing costs on those responsible," Assistant Director Brett Leatherman of the FBI’s Cyber Division said in the advisory.

It stated that a "group of Iranian-affiliated actors" has "targeted devices spanning multiple U.S. critical infrastructure sectors, including Water and Wastewater Systems, Energy and Government Services and Facilities, to include local municipalities."