Skip to content

South St. Paul water utility cyber incident

Public report preview

City of South St. Paul logo
Incident date

South St. Paul identified malicious activity affecting automated water-utility controls on July 27, 2026, but contingency procedures kept drinking water safe and water and wastewater services operating normally. The incident was among more than 30 Minnesota water-system attacks; public attribution remained open despite reports that anonymously briefed officials suspected Iranian hackers.

Read DysruptionHub’s article about this incident:

Recent incident intelligence

Paid member report preview

Unlock the complete incident report

New reports are available immediately to Sustainers, after 2 weeks to Supporters, and to everyone once they are more than 1 month old.

Sustainers help fund the research and verification behind the Cyber Incident Registry while receiving immediate access to new reports.

See something that needs correction?

Signed-in members can report an error, update, or missing source.