Multiple water facilities in Minnesota attacked; Iranian hackers may be responsible

Media and open-source reporting indicate that Iran-linked group Handala claimed or is suspected of conducting cyberattacks against U.S. water-sector OT/ICS infrastructure (including a reported attack on Cal Water and incidents at multiple Minnesota utilities). While Handala warned of broader targeting of PLCs and SCADA systems and the FBI has warned of actors targeting Rockwell, Schneider Electric, and Siemens equipment, there is currently no public evidence of water tampering and attribution remains tentative with limited technical indicators.