Cyberattacks have targeted water supply systems in at least seven U.S. states, and a political fight over whether Iran or Minnesota's own government bears responsibility is now overshadowing the federal response.
President Trump used a Friday cabinet meeting at Camp David to pin the blame squarely on Minnesota and its Democratic governor, Tim Walz. At the time, Minnesota was the only state publicly identified as a target. By Saturday, Michigan had been confirmed as a second state under attack, and officials acknowledged that five additional states, still unnamed, were also considered targets, the Daily Caller reported.
None of the targeted water supplies had been altered in a way that made them harmful to drink as of Saturday afternoon, according to reporting by The New York Times cited in the same account. But the scope of the intrusions, spanning at least seven states, and the open question of attribution have turned a cybersecurity incident into a political flashpoint between the White House and one of the Democratic Party's most prominent governors.
At the Camp David meeting, Trump made no effort to soften his assessment of the state's handling of the situation. He told his cabinet:
"I blame it on Minnesota because they are grossly incompetent."
He went further, rejecting the theory, advanced by anonymous U.S. officials, that Iran was behind the intrusions. "I don't think there was an Iranian cyberattack," Trump said. "I think Minnesota ought to get its act together." He added that "Iran has bigger problems than worrying about Minnesota," a reference to the ongoing U.S. military conflict with Tehran.
Walz fired back within hours. In a post on X dated July 31, the governor accused Trump of deflecting from a foreign adversary's role.
"Trump knows exactly who is responsible for this attack, and knows that other states were hit too. This is what modern warfare looks like, and it further illustrates there's no plan to win a war with Iran."
The exchange laid bare a fundamental disagreement: the president sees the breach as a failure of state-level competence, while Walz frames it as a national security crisis tied to the Iran conflict.
The FBI acknowledged the attacks in a statement provided to the Daily Caller News Foundation but offered no public attribution.
"The FBI is aware of recent public reporting around Water and Wastewater (WWS) sectors. The FBI and our interagency partners are fully engaged to protect critical infrastructure and we remain well-equipped to protect against cyber threats of all varieties."
That careful language contrasts with what an unnamed mayor of a small Minnesota city told The New York Times. The mayor said the FBI is "pretty sure it's Iranian actors" but is "reluctant to state this publicly." He also said he was "getting bits and pieces of information from the state of Minnesota", a description that suggests local officials on the front lines of the attack are operating with limited guidance from Walz's administration.
The Pentagon, now operating under its restored name as the Department of War, told the DCNF it had nothing to provide. Michigan Gov. Gretchen Whitmer's office did not respond to requests for comment. Neither did Walz's office. The White House referred reporters to Trump's public statements.
The result is a vacuum of confirmed information. Anonymous officials point to Iran based on its history of targeting similar water infrastructure. But no forensic evidence has been made public, the technical mechanism of the attacks remains undisclosed, and the five unnamed states have not been identified. Readers are left with competing political narratives and a federal investigation that, at least publicly, has produced more boilerplate than answers.
Walz is not entering this dispute from a position of strength. The former 2024 Democratic vice-presidential nominee, who ran alongside Kamala Harris and lost to Trump and Vance, has faced a cascade of problems in Minnesota that have eroded his standing even within his own party.
He initially planned to seek a third gubernatorial term in November 2025 but dropped out in January 2026 amid mounting scrutiny. A fraud scandal largely linked to the Somali community in the Twin Cities area has dogged his administration, and the fallout has been severe enough to draw federal attention.
In June 2026, Vice President JD Vance referred Walz to the Department of Justice's Fraud Division for a criminal investigation. Vance wrote on X at the time that those who "facilitated fraud, lied under oath about what they knew, or harassed and intimated whistleblowers, they must face justice." The current status of that referral has not been publicly disclosed.
That fraud referral sits alongside a broader pattern of governance failures that have drawn national attention. Walz's administration has faced questions about personnel decisions made under pressure from fraud investigations and about the scale of federal dollars that went missing on his watch.
Minnesota has also drawn scrutiny for other controversial actions under Walz, including pardon decisions that critics viewed as undermining public safety. Taken together, the record gives Trump's "grossly incompetent" charge a foundation that extends well beyond the cyberattacks themselves.
The cyberattack dispute cannot be separated from the broader political tension over the U.S. military conflict with Iran. As of Saturday, 18 American service members had been killed in the fighting. Public support for the effort is thin and falling.
An AP-NORC survey conducted July 23, 27 found that 64 percent of U.S. adults believed the war was not "worth fighting." Among independents, that figure rose to 68 percent. Even among Republicans, 37 percent, more than a third of the president's own base, said the war was not worth it.
Walz's X post tried to leverage that discontent, framing the cyberattacks as evidence that "there's no plan to win a war with Iran." It is a politically convenient argument for a governor under federal investigation: shift the conversation from state-level failures to a national security debate where the administration is on defense.
Trump, for his part, has an equally clear incentive to keep the focus on Minnesota. If the attacks originated from Iran, they become another data point in a war that most Americans already doubt. If they can be attributed to state-government negligence, the political cost falls on a Democratic governor who is already wounded. The fraud scandals that have plagued Walz's tenure, including cases where hundreds of millions in federal funds were stolen, make the incompetence narrative easy to sell.
The most pressing unanswered question is not political but operational. Seven states have been targeted. Only two, Minnesota and Michigan, have been named. The other five remain unidentified as of Saturday afternoon. The specific water infrastructure systems affected, the technical method of intrusion, and the forensic evidence tying the attacks to any particular actor have not been made public.
For the unnamed mayor of the small Minnesota city at the center of this story, the information gap is not abstract. He told The New York Times he is working with fragments, "bits and pieces" from the state, while his residents depend on water systems that have been breached by an attacker whose identity the federal government will not publicly confirm.
That mayor's account is the most revealing detail in the entire episode. A local official responsible for his community's drinking water says the FBI privately believes Iran is behind the attack but won't say so on the record, and the state government is feeding him scraps. Whether the failure belongs to Minnesota, to the FBI, or to both, the people who have to drink the water are the ones left in the dark.
Meanwhile, fraud cases continue to surface across Minnesota's government programs, reinforcing the impression of a state apparatus that has struggled to protect the public trust on multiple fronts simultaneously.
When the people responsible for keeping the lights on and the water clean can't get a straight answer from their own state capital or from Washington, the political blame game is beside the point. Someone breached seven states' water systems. The public deserves to know who, and why the answer is taking so long.