On July 26-27, 2025, unknown hackers conducted a coordinated cyberattack targeting operational technology (OT) systems at more than 30 community water utilities across Minnesota. The City of Braham reported its water plant went offline due to a malicious cyber-attack on computerized operating systems. The plant was restored within approximately three hours. Other affected communities reported temporary equipment malfunctions and switched to manual operations or contingency plans to maintain services. MNIT activated its cybersecurity incident response capabilities statewide. The attack vector and threat actor remain unidentified. The incident bears similarities to prior attacks by Iranian-linked cyber actors who exploited exposed Rockwell Automation/Allen-Bradley programmable logic controllers (PLCs) in critical infrastructure since March of the same year, though no direct attribution has been made. CISA issued guidance titled 'CI Fortify – Advice for isolating vital systems' recommending isolation of key OT systems during cyberattacks, co-authored with the Australian Signals Directorate's ACSC, the FBI, and international partners.