More than 30 municipal water systems in Minnesota experienced a coordinated cyberattack, with the city of Braham being one of the most significantly impacted. The attack briefly took Braham's water plant offline for about two hours on Monday morning, forcing residents to minimize water usage while operators worked to restore systems. Authorities confirmed the attackers shut down the well pump and water treatment plant controls, though no physical damage or water quality issues were reported. Similar incidents affecting water and wastewater utilities have been reported in seven other states.
The Federal Bureau of Investigation (FBI) is investigating the attacks, which occurred shortly after advisories from the FBI, Cybersecurity and Infrastructure Security Agency (CISA), and other agencies warned that Iranian-affiliated hackers were targeting water and wastewater systems, specifically programmable logic controllers (PLCs) used to manage operational technology like pumps and valves. Braham's mayor, Nate George, stated that the attackers accessed the system through two internet ports used by various water systems across Minnesota, changing IP addresses and passwords to disrupt monitoring and control functions.
Small communities like Braham, with a population of approximately 1,800 and a median income of $55,000-$60,000, face significant challenges in cybersecurity. Braham lacks an IT department, and establishing one could lead to an unaffordable 14% annual tax levy increase. The city's water system is now operating manually, disconnected from the internet, which will likely increase labor costs. Experts note that while the attackers didn't seem to aim for water quality disruption, the potential for such an outcome exists, and the cost of necessary IT upgrades for these smaller utilities is substantial.
