Minnesota Water Systems Attacks: Internet-Exposed PLCs Under Attack

In late July 2026, a coordinated cyberattack disrupted water and wastewater operations in over 30 Minnesota communities by compromising internet-exposed MicroLogix 1100/1400 PLCs; attackers changed device IPs and passwords and in some cases modified ladder logic, causing loss of monitoring/control, pressure loss, and flooding, and the FBI/EPA public advisory warns the simple, repeatable tradecraft exploits unsegmented OT networks and shared third‑party integrator designs.