Trump says he does not think Iran is behind a cyberattack on Minnesota water systems: “I think I blame it on Minnesota because they're grossly incompetent”

Reuters 2026-07-31

Context & Ripple Effects

The president's comments directly conflict with a WaterISAC memo linking dozens of Minnesota utility attacks to Iran, making public attribution—not just incident response—the immediate point of contention.

The dispute also follows a federal warning about Iran-linked targeting of industrial control devices in US water and energy systems. It revives a familiar pattern from Trump's earlier public downplaying of a major government cyberattack.

First-order effects

The president's remarks publicly shift attention from a foreign actor to Minnesota utilities' own competence, creating a visible split over responsibility for the incidents.
Water-system operators now face heightened pressure to explain their defenses while the alleged source of the attacks is disputed at the highest political level.

Second-order effects

Conflicting public attribution can complicate coordinated messaging among utilities, information-sharing groups, and federal agencies, even when technical responders continue investigating the same incidents.
The contrast with the WaterISAC assessment may make utilities more reliant on sector-specific threat intelligence rather than political statements when communicating cyber risk to local stakeholders.

Third-order effects

If senior political messaging repeatedly diverges from sector and agency attribution, cyber incident response could become more polarized, weakening the shared factual basis needed for deterrence and critical-infrastructure coordination.
The episode points to a broader governance challenge: operational security decisions may increasingly need to withstand public disputes over attribution rather than rely on a single national narrative.

The trend: Critical-infrastructure cyber defense is becoming as dependent on trusted attribution and coordinated communication as on the technical protection of operational systems.

Discussion

@rvawonk Caroline Orr Bueno, Ph.D on x
In the past 3 years, Iran has launched cyberattacks targeting dozens of U.S. water and energy facilities, across at least seven states, involving thousands of individual intrusion attempts. This is what they do. It's not about Minnesota; it's about Americans.
@atrupar Aaron Rupar on x
Trump: “We heard in Minnesota there was a cyberattack and they blame it on Iran. I don't think so. I blame it on Minnesota because they're grossly incompetent. Iran's got bigger problems than worrying about Minnesota.” [video]
@campuscodi.risky.biz Catalin Cimpanu on bluesky
It is literally Iran, yet this clown is lying for political points [embedded post]
@dnvolz Dustin Volz on x
It's important to note the FBI's own public service announcement, published late Thursday evening, prominently notes “at least seven states” have reported since last weekend attempts to compromise water systems (Rockwell PLCs) “and some of that activity degraded water operations”…
@tom_winter Tom Winter on x
We're now up to 7 states that have had their water or wastewater systems impacted.
@foxnews @foxnews on x
JUST IN: President Trump pushes back on state officials blaming Iran for a recent cyber attack …
@jacquiheinrich Jacqui Heinrich on x
President Trump at Camp David tells reporters he does not believe preliminary assessment that Iran is likely behind MN city water cyber attacks. POTUS: “We heard in Minnesota there was a cyber attack, and they blame it on Iran. I don't think so. I think I blame it on Minnesota be…
Qasim Ali Qasim Ali on linkedin
🚨 𝗖𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝗦𝗲𝗰𝘂𝗿𝗶𝘁 …
@couts Andrew Couts on bluesky
NEW: An industry memo obtained by @wired.com links dozens of cyberattacks on Minnesota's water system to Iran-backed hackers. Clues point to the IRGC's Cyb3rAvengers group, but other details point to another group, Handala. No official attribution has been made. @agreenberg.bsk…
@agreenberg Andy Greenberg on bluesky
A Minnesota state fusion center report ties the cyberattacks on 30+ Minnesota water utilities to Iranian-affiliated hackers, according to a water utility information sharing group's memo I obtained. — www.wired.com/story/a-leak...
@bancsutherland Bancroft Sutherland on bluesky
Iran going after Bluesky and Minnesota really raises some resource allocation questions.
r/PLC r on reddit
CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs
r/minnesota r on reddit
A Leaked Memo Ties Cyberattacks on Minnesota Water Utilities to Iran
r/Economics r on reddit
U.S. Sees Iran as Likely Behind Cyberattack on Minnesota Water Systems
r/water r on reddit
U.S. Sees Iran as Likely Behind Cyberattack on Minnesota Water Systems

Chronicles