Minnesota Water Sector Under Fire as Trump Blames State for Iranian-Attributed Cyberattacks
President Donald Trump sparked outrage among cybersecurity experts and officials from Minnesota’s government last week when he claimed that the state was behind recent cyberattacks on its water systems. The attacks, which have left several communities in the dark and without access to essential services, were initially attributed to Iran by US investigators.
In a bizarre display of victim-blaming, Trump told reporters that Minnesota was “grossly incompetent” and that he didn’t think an Iranian cyberattack had occurred. Instead, he suggested that the state’s government was somehow responsible for the attacks. When asked to clarify his remarks, the White House referred the question back to the president’s comments.
But cybersecurity experts were quick to push back on Trump’s claims. “Victim blaming in cyber is so 2000 and late,” said Chris Wysopal, a pioneer in the field of cybersecurity and co-founder of Veracode. Wysopal was joined by other experts who pointed out that attribution in cyberattacks can be complex and nuanced, but that the evidence currently points to Iranian involvement.
Jake Williams, a member of the IANS faculty, noted that Trump’s own intelligence services had attributed the attacks to Iran. Andy Jabbour, founder and CEO of Gate 15, a cybersecurity firm that works with the water sector, expressed confusion over Trump’s comments, stating that they were “reckless” and “disingenuous.”
The governor of Minnesota, Tim Walz, also responded strongly to Trump’s remarks. In a Facebook post, he noted that his state had taken steps to improve its cyber defenses, including reducing federal funding for the Cybersecurity and Infrastructure Security Agency (CISA). Walz also pointed out that CISA has been significantly weakened under Trump’s administration.
The attribution of the attacks to Iran is based on technical indicators, including similarities in tactics and techniques used by known Iranian threat groups. Experts point out that this is consistent with recent statements made by Iran-aligned groups and assessments from CISA and other agencies.
While it remains unclear what exactly motivated Trump’s comments, they have been widely criticized as a display of ignorance about the complexities of cyberattacks and attribution. The practical takeaway for readers is clear: when it comes to cybersecurity, it’s essential to rely on evidence-based information and expert analysis rather than unsubstantiated allegations or speculation.
In an increasingly complex and interconnected world, understanding the nuances of cyberattacks and attribution is crucial for individuals, organizations, and governments alike. As the threat landscape continues to evolve, it’s more important than ever to prioritize accuracy, expertise, and collaboration in our response to these attacks.
Source: CyberScoop — 2026-07-31