'I don't think so': Trump fires back after Iran blamed for Minnesota cyberattack

WASHINGTON, DC: President Donald Trump dismissed suggestions that Iran was behind a cyberattack targeting Minnesota water systems, saying he blamed the state's leadership instead.

His remarks came as US officials investigate whether Iranian hackers were responsible for malicious cyber activity affecting water utilities in at least seven states. Authorities stressed that the investigation remains ongoing and that no final attribution has been made.

Trump blames Minnesota leadership

Speaking during an open Cabinet meeting at Camp David on Friday, July 31, Trump broke from reports pointing to Iran and instead targeted Minnesota Gov Tim Walz and state officials.

"Today, I just want to mention that we heard in Minnesota there was a cyber attack, and they blame it on Iran," Trump said. "I don't think so. I think I blame it on Minnesota because they're grossly incompetent."

Trump continued his criticism by adding, "There was a cyber attack of 30 water plants, and I would blame it on Minnesota and the governor, the corrupt governor of Minnesota."

He also mocked the suggestion that Tehran was responsible, saying, "They like to say, 'Oh, it's Iran. Iran should be so lucky. Iran's got bigger problems than worrying about Minnesota.'"

The president used the incident to argue that government failures, rather than a foreign adversary, were at the center of the security lapse.

Cyber investigation remains unresolved

Trump's comments contrasted with the ongoing federal investigation into the attacks.

According to a CBS News report, investigators are examining whether Iranian hackers carried out the cyber activity that affected technology used by water systems in at least seven states, including more than 30 community water systems in Minnesota. 

Officials cautioned, however, that the activity has not been definitively attributed to Iran and said the assessment could change as more technical evidence is collected.

Authorities are also investigating whether the attackers deliberately attempted to appear Iran-based in an effort to create confusion during the ongoing US conflict with Iran.

The FBI said incidents had occurred in "at least seven states" but did not identify them publicly. Minnesota and federal officials have likewise not formally attributed the attacks to any specific actor.

Water service continued despite attacks

Federal agencies warned that attackers are increasingly targeting programmable logic controllers used by water and wastewater utilities.

Nick Anderson, acting director of the Cybersecurity and Infrastructure Security Agency, said the agency "is currently observing a significant increase in cyber threat actors targeting programmable logic controllers (PLC) at water utilities." 

He urged operators to "remove publicly exposed PLCs and other operational technology from the internet as soon as possible."

Minnesota officials said investigators found similarities in both the timing of the incidents and the technology affected but had not confirmed every attack was carried out by the same actor.

Despite the disruptions, officials reported that drinking water remained safe. 

South St Paul, Braham and Plymouth all switched to manual operations after detecting problems, allowing water and wastewater services to continue without interruption, the report said.

Officials in each community also said they found no evidence that drinking water quality or customer data had been compromised, the report stated.