Trump rejects Iran link, blames Minnesota for its own water system cyberattacks

Perspective Analysis

President Donald Trump rejected US intelligence assessments linking Iran to cyberattacks on Minnesota water systems and instead blamed the state’s own officials for gross incompetence.

The attacks struck more than thirty water plants in Minnesota on July 26 and 27, five months into an active US-Iran conflict that began after American forces killed Supreme Leader Ali Hosseini Khamenei in February. Cybersecurity experts examining the tradecraft noted the absence of any ransom demand and patterns consistent with prior Iranian operations, including an earlier strike on a Michigan medical equipment manufacturer. Federal agencies including the FBI and Environmental Protection Agency had already issued alerts about Iranian hackers targeting US water and sewage infrastructure, warning that some incidents had forced boil-water notices and manual operations. The Cybersecurity and Infrastructure Security Agency coordinated with state partners after similar activity appeared in at least seven states.

Trump made his comments during a cabinet meeting at Camp David. “We heard in Minnesota there was a cyberattack and they blame it on Iran. I don’t think so,” he said. “I think I blame it on Minnesota because they’re grossly incompetent. There was a cyber attack of 30 water plants and I would blame it on Minnesota and the governor, the corrupt governor of Minnesota. Iran’s got bigger problems than worrying about Minnesota.” When pressed later whether he could rule out Iranian involvement, he repeated the charge: “Minnesota is behind it. You know who is behind it? Minnesota. Because they’re incompetent. The governor’s really… I don’t think there was an Iranian cyberattack.”

Minnesota Governor Tim Walz responded that Trump knew the responsible party and understood other states had also been hit. Walz credited state experts with quickly identifying the vulnerability and restoring operations, adding that water supplies remained safe. He noted that the episode illustrated the absence of a coherent plan for the ongoing war with Iran. Minnesota authorities confirmed no lasting damage to public health or service delivery.

The episode occurs against the backdrop of a war that has already destabilized Middle East energy markets and grown deeply unpopular inside the United States. An Associated Press-NORC poll found roughly two-thirds of American adults now view the conflict as a mistake, contributing to Trump’s declining approval ratings ahead of midterm elections. Iran has conducted multiple cyberattacks on American targets since the war began, framing some as retaliation for earlier US strikes that killed civilians.

All five outlets that published detailed accounts carried the same core sequence of events and the same direct quotations from Trump. They also relayed the same expert and agency assessments that the attacks bore Iranian hallmarks. No outlet endorsed Trump’s alternative explanation or omitted the prior federal warnings. The Frontier Post added that a state fusion center had aligned the Minnesota incidents with an Iran-linked campaign previously documented in a July 22 report signed by seven US agencies. The Independent placed Trump’s stance in a longer pattern of his dismissing intelligence conclusions that conflicted with his preferred political narrative, citing his earlier refusal to accept Russian election interference findings.

Coverage converged because the primary evidence—Trump’s own recorded remarks, the technical details already reported by the New York Times and Washington Post, and the standing federal alerts—left little factual space for divergent interpretation within the first twenty-four hours. Outlets operating from different national vantage points still reproduced the same contradiction between the president’s public position and the assessments produced by his own government’s cybersecurity apparatus.