Iran hit 30 Minnesota water systems last week.
Donald Trump looked at the evidence, looked at Walz, and said exactly what you were thinking.
Now Tim Walz is trying to make you forget he had four days to stop it.
The Warning Nobody Acted On
On July 22, 2026, CISA, the FBI, and a coalition of federal agencies issued an advisory warning that Iranian-backed hackers were actively targeting internet-connected water system controls.
They named the threat actor.
They named the devices being exploited.
They told every water operator in America to get those systems off the public internet immediately.
Minnesota water utilities got that warning.
https://twitter.com/FoxUSNews/status/2084613394607530253?s=20
Four days later, Iranian military hackers called CyberAv3ngers – a unit of Iran's Islamic Revolutionary Guard Corps – remotely accessed more than 30 municipal water systems across the state.
They changed passwords and locked out operators.
They triggered boil water notices.
They forced cities to run their water systems by hand.
This wasn't a surprise attack.
It was a scheduled test that Tim Walz's state failed.
Walz Knew Iran Had Done This Before
Here's what makes this inexcusable.
Iran ran this exact same play in November 2023 – against the Municipal Water Authority of Aliquippa, Pennsylvania.
CyberAv3ngers broke into a pump station serving 6,000 Americans, shut it down, and left a message on the screen: "You have been hacked. Down with Israel."
Federal agencies investigated.
Warnings went out.
And water utilities across America – including in Minnesota – kept their critical systems plugged into the open internet with default passwords they never bothered to change.
By 2024, EPA inspectors had documented "alarming cybersecurity vulnerabilities" across American water systems – places where all employees shared one login, and former workers still had active access to systems controlling your drinking water.
Iran didn't get smarter between 2023 and 2026.
Minnesota just never fixed what it knew was broken.
Trump Called It at Camp David
When the story broke, Trump didn't hedge.
"I think I blame it on Minnesota because they're grossly incompetent," he told reporters at Camp David. "I would blame it on Minnesota and the governor, the corrupt governor of Minnesota."
The media called it irresponsible.
Fact-checkers called it misleading.
Then the timeline came out: federal agencies had warned about CyberAv3ngers targeting water systems four days before the attacks began. The Aliquippa playbook was three years old. Minnesota utilities ignored both.
Trump was right on the first try.
Walz's Response Tells You Everything
Walz hit social media immediately.
"DOGE took an axe to CISA and left the U.S. exposed to cyber attacks," he posted.
Notice what that response doesn't include: any explanation for why Minnesota water utilities were still running critical infrastructure on default passwords connected directly to the internet – after a federal warning, after a Pennsylvania attack, after three years of documented vulnerabilities.
https://twitter.com/Newsforce/status/2084635602754932825?s=20
Walz wants you to think this is a budget problem.
The FBI's guidance to every water operator in America right now costs exactly zero dollars: disconnect your control systems from the public internet.
Minnesota utilities didn't need more federal money.
They needed to do the one thing every agency told them to do and didn't.
Iran Has Been Testing American Resolve for Years
The Aliquippa attack wasn't a random strike. It was a demonstration.
In 2021, Iranian hackers targeted Boston Children's Hospital.
The FBI stopped it before kids were harmed.
In 2023, they hit Pennsylvania water and left their calling card on the screen.
Nobody learned.
In 2026, they hit seven states simultaneously – boil water notices, manual operations, families across 30 Minnesota communities wondering if their tap water was safe.
Iran is not massing troops on a border.
They're sitting in Tehran, reaching through the internet into American cities, testing what happens when they turn something off.
Minnesota is the answer to that test: Walz blamed Trump, the media ran cover, and the utilities that ignored every warning got treated as victims instead of the negligent actors they are.
The warnings were there.
The playbook was three years old.
The advisory landed four days before the attack.
He was being generous when he said incompetent.
Sources:
- Daniel Arkin, Michael Kosnar, Ben Goggin, "Cyberattacks targeting municipal water systems have been reported in at least seven states," NBC News, July 31, 2026.
- "Iran hackers hit 30 Minnesota water systems days after CISA updates PLC advisory," Cybernews, July 31, 2026.
- "Municipal Water Authority of Aliquippa hacked by Iranian-backed cyber group," CBS Pittsburgh, November 26, 2023.
- "US Water Systems Hit by Suspected Iranian Cyber Attacks," OPFOR Journal, August 1, 2026.
- "IRGC-Affiliated Cyber Actors Exploit PLCs in Multiple Sectors," CISA/FBI/EPA/NSA Joint Advisory, April 7, 2026.
- Lucas Nolan, "FBI Warns of Cyberattacks on Municipal Water Systems Across Seven States," Breitbart, August 3, 2026.