0 Share Newsweek is a Trust Project member See more of our trusted coverage when you search. Prefer Newsweek on Google to see more of our trusted coverage when you search. President Donald Trump on Friday rejected reports that Iran was behind a cyberattack targeting Minnesota water systems, saying he believes state officials are at fault despite investigators reportedly examining evidence of a possible Tehran link.
"We heard in Minnesota there was a cyberattack, and they blame it on Iran. I don't think so," Trump told reporters during a Cabinet meeting at Camp David. "I think I blame it on Minnesota because they're grossly incompetent."
Trump also took aim at Minnesota Governor Tim Walz , a Democrat, as questions continue over who carried out the attack.
Newsweek reached out on Friday to Walz’s office and the White House, which pointed back to the president’s comments.
Trump's comments contrast with reports from multiple outlets suggesting investigators have found indications the hackers may be linked to Iran.
Wired reported Thursday that a Minnesota Fusion Center memo said the attacks were "aligned" with an allegedly Iran-linked cyber-sabotage campaign. The New York Times , citing unnamed U.S. and Minnesota officials, reported that investigators believed the hacks were probably the work of Tehran.
No federal agency has publicly attributed the attack to Iran, and officials continue to investigate.
Investigators are also examining whether the perpetrators may have sought to make the activity appear Iranian in origin, according to reports citing officials familiar with the probe. Authorities have cautioned that assessments remain preliminary and could change as additional technical evidence is analyzed.
The reported cyber campaign was not limited to Minnesota. CBS News reported that the FBI told state officials at least seven states were affected by the attacks, although Minnesota was among the states that drew significant attention.
The cyberattack targeted Minnesota water systems, drawing attention because water infrastructure is considered a critical service and has long been viewed by cybersecurity experts as a potential target for foreign adversaries and other malicious actors.
Officials have not publicly detailed the full scope of the incident or identified those responsible.
Cybersecurity attribution can be a lengthy process, with investigators often needing weeks or months to analyze technical evidence before reaching a definitive conclusion.
Trump's remarks introduce a sharp public disagreement over the suspected source of the attack at a time of continued tensions between Washington and Tehran.
If investigators ultimately determine Iran-linked actors were involved, the incident could become the latest example of cyber activity attributed to groups connected to the Iranian government. For now, however, authorities have not publicly named a perpetrator, and the investigation remains ongoing.