Iran-Linked Group Claims Minnesota Water Hack Hit 40+ Communities

KEMETIC MINDS
Infrastructure Watch — Daily Update — August 14, 2026

---

Two Iranian-linked hacking groups are publicly claiming last month’s cyberattack on Minnesota water systems, even as state investigators confirm more than 40 communities felt the effects. Separate breaches surfaced in New Jersey and Michigan, and security experts are now warning that the U.S. power grid could be the next target.

Key Takeaways

• Iran-linked groups CyberAv3ngers and APT IRAN posted on Telegram that they take “direct responsibility” for the Minnesota water system attack (5 Eyewitness News, 2026).
• Minnesota IT Services says more than 40 communities reported impacts tied to the July 26–27 activity, and its investigation remains ongoing (5 Eyewitness News, 2026).
• Hackers breached water systems in Cape May and Woodbine, New Jersey, in July — an attack Rep. Josh Gottheimer called a “wake-up call” (CBS-Philadelphia, 2026).
• Water treatment facility passwords were changed in a hack, according to Slotkin (Planet Detroit, 2026).
• Former Marine Wade Miller warns small teams could shut down the U.S. economy “for weeks, if not months” without stronger power grid defenses (News Radio 1200 WOAI, 2026).
• A Friday power disruption split southern Kazakhstan from the regional grid; KEGOC restored service within hours and a special commission is investigating (Qazinform, 2026).

---

1. Water Supply: Iran-Linked Groups Claim Minnesota Attack

A hacking group closely tied to Iran posted on Telegram that it and the CyberAv3ngers group carried out last month’s cyberattack on Minnesota water systems. The post, tracked through Threat Beat — the reporting platform run by Auburn University’s McCrary Institute for Cyber and Critical Infrastructure Security — reads: “The attack on Minnesota was the work of the CyberAv3ngers group and us, and we take direct responsibility for it” (5 Eyewitness News, 2026).

Minnesota IT Services confirmed its investigation remains ongoing and that more than 40 communities have reported impacts related to activity that occurred July 26–27 (5 Eyewitness News, 2026). MNIT and the FBI said they were aware of the posts by CyberAv3ngers and APT Iran but declined comment; CISA had not yet responded (5 Eyewitness News, 2026).

CyberAv3ngers is affiliated with the Islamic Revolutionary Guard Corps, according to the U.S. government and Rewards for Justice, and CISA says the IRGC — designated as a foreign terrorist organization — has targeted U.S. technology, including water and wastewater systems, through CyberAv3ngers and on behalf of the Iranian government dating back to 2023 (5 Eyewitness News, 2026). The group previously posted that it “has carried out attacks on U.S. infrastructure, and we warn America to back down,” and APT Iran said its “intention in attacking Minnesota was only to warn” and to retaliate against “any country that poses a threat to Iran” (5 Eyewitness News, 2026).

In New Jersey, hackers breached water systems in Cape May and Woodbine in July, an attack Rep. Josh Gottheimer called a “wake-up call,” saying AI is making it easier to target small-town water systems (CBS-Philadelphia, 2026). In Michigan, water treatment facility passwords were changed in a hack, according to Slotkin (Planet Detroit, 2026). A University of Chicago cybersecurity expert also discussed water system hacks and critical infrastructure concerns (WTTW, 2026).

---

2. Power Supply: Grid Defense Warnings, Kazakhstan Blackout

The water hacks are fueling warnings about the U.S. power grid. Wade Miller, a former Marine and executive director of the Center for Renewing America, said the threat is “very real” and that “small teams of infiltrators could shut down the U.S. economy for weeks, if not months” — leaving gas, electricity, and food from reaching homes and stores (News Radio 1200 WOAI, 2026).

Miller’s stated priorities include removing Chinese parts from critical infrastructure, making electricity a top priority with the correct fuel sources, adding more protection against cyberattacks, and building defenses against electromagnetic attacks (News Radio 1200 WOAI, 2026). The remarks are an expert call to action, not a report of a new grid incident.

Meanwhile, southern Kazakhstan suffered a major power system disruption on Friday, August 14. National grid operator KEGOC said two hydropower generators at the Toktogul Hydropower Plant in Kyrgyzstan disconnected at 2:37 p.m., overloading the North-East-South power transition corridor and separating the southern zone from Kazakhstan’s grid and the interconnected power systems of Kyrgyzstan, Uzbekistan and Tajikistan (Qazinform, 2026).

The disruption affected consumers in Almaty, Zhambyl, Turkistan, Kyzylorda and Zhetysu regions, as well as parts of the northern zone including Karaganda, Ulytau and Abai regions (Qazinform, 2026). KEGOC said electricity was restored in Karaganda, Ulytau and Abai by 2:47 p.m., in Almaty and Zhetysu by 4:26 p.m., and in Zhambyl, Turkistan and Kyzylorda at 4:34 p.m. A special commission will investigate the causes, and Qazinform separately reported a power outage that left more than 43,000 customers in Shymkent without electricity (Qazinform, 2026).

---

3. What’s Disputed or Unconfirmed

The Telegram posts are the hackers’ own claims and have not been independently confirmed. MNIT and the FBI declined comment on the posts, and CISA had not responded when 5 Eyewitness News sought comment (5 Eyewitness News, 2026).

Reports also differ on the scale of the Minnesota impact: a related report cited “over 30 Minnesota water systems,” while MNIT says more than 40 communities reported impacts (5 Eyewitness News, 2026). The Kazakhstan timeline comes from operator KEGOC, and a special commission is still investigating the causes (Qazinform, 2026). The power grid warnings from Wade Miller are expert commentary and advocacy rather than documentation of a specific attack (News Radio 1200 WOAI, 2026).

---

🛡️ Free Preparedness Guides

Two free, printable checklists you can download and keep on hand — one for water-supply
disruptions, one for power outages.

---

References

1. 5 EYEWITNESS NEWS. (2026, August 14). Hacking group linked to Iran claims responsibility for cyberattack on Minnesota water systems, report says. kstp.com
2. WTTW. (2026, August 13). UChicago Cybersecurity Expert on Water System Hacks, Critical Infrastructure Concerns. news.wttw.com
3. Yahoo. (2026, August 13). New Jersey Congressman says Iranian cyber attack targeting water supply "wake-up call". yahoo.com
4. Planet Detroit. (2026, August 14). Michigan environmental news: Water treatment facility passwords changed in hack, Slotkin says. planetdetroit.org
5. News Radio 1200 WOAI. (2026, August 14). America Needs To Protect Our Power Grid Before Enemies Strike. woai.iheart.com
6. Qazinform. (2026, August 14). Special commission to probe power grid failure after major power outage hits southern Kazakhstan. qazinform.com

---