A president at war with Iran tells the American public that Iran could not possibly have hacked Minnesota's water systems.

"Iran should be so lucky. Iran's got bigger problems than worrying about Minnesota."

\u2014 President Donald Trump, Cabinet meeting, July 31, 2026

Earlier this week, more than 30 municipal water systems across Minnesota were targeted in a coordinated cyberattack. The attack struck the operational technology that controls water treatment equipment, the kind of infrastructure that keeps drinking water safe and flowing. State and federal investigators quickly concluded the work was Iran's. The malware matched known Iranian hacking tactics. There was no ransom demand. The objective was disruption, not profit.

Then the president of the United States did something no sitting commander in chief has ever done. He defended the military capabilities of the nation he is actively bombing.

"We heard in Minnesota there was a cyberattack and they blame it on Iran. I don't think so, I think I blame it on Minnesota because they're grossly incompetent," Trump said during a Cabinet meeting on Friday. "There was a cyberattack of 30 water plants and I would blame it on Minnesota and the governor, the corrupt governor of Minnesota. They like to say, 'Oh, it was Iran.' Iran should be so lucky. Iran's got bigger problems than worrying about Minnesota."

Translation: the man who authorized war with Iran will not let a hostile state government receive federal sympathy for an Iranian attack.

The evidence against Iran is not thin. In April, the Cybersecurity and Infrastructure Security Agency published a joint advisory with the FBI, the NSA, and other agencies warning that Iran-affiliated hackers were targeting water and wastewater systems by compromising internet-connected controllers that allow remote management of water equipment. That advisory described the exact attack vector used in Minnesota.

Wired obtained communications from the Water Information Sharing and Analysis Center, an industry group, showing that Minnesota's Fusion Center had issued an alert and found the attacks were "aligned" with the Iran-affiliated campaign described in the CISA warning. The FBI confirmed the recent cyberattacks affected at least seven states. No ransomware group has claimed responsibility. The pattern fits state-sponsored disruption.

CISA issued yet another alert on Thursday, warning of an increase in actors targeting water infrastructure. The agency that exists specifically to protect American critical infrastructure was telling water systems nationwide to defend themselves from the same adversary the president insists could not possibly be behind it.

This is not the first time Iran has demonstrated its cyber capabilities against American targets. In March, Iranian hackers successfully compromised Stryker, one of the largest medical equipment manufacturers in the world. Earlier this year, Iran-linked actors broke into FBI Director Kash Patel's personal email account, releasing photos that prompted a security review of the bureau's own systems. Iran has now fired between 8,000 and 9,000 drones and missiles at targets across the Middle East since the U.S.-Israeli war began in February, and The Intercept reported that Iranian attacks have overwhelmed American air defenses at U.S. bases in Jordan, Kuwait, Bahrain, Qatar, Saudi Arabia, and Iraq.

The president's claim that "Iran's got bigger problems" ignores a basic reality: Iran has been fighting this war on two fronts. Kinetic strikes against American bases in the Middle East. Cyber operations against American infrastructure at home. Both are happening. The question is whether the commander in chief can see that he is losing both.

The personal animus is unmistakable. Minnesota is governed by Tim Walz, Trump's vice-presidential opponent in the 2024 election. The state has stood up to federal immigration enforcement operations. This is the same administration that has refused disaster aid to blue states while granting it to red ones, that has admitted in court to stripping energy grants from states based on whether they voted for Trump. The federal government is being used as a cudgel against Democratic governors, and now it includes denying a cyberattack attribution that even the president's own agencies are making.

The practical consequences are immediate. Does the federal government now stop sharing threat intelligence with Minnesota because the White House must be placated? Do red states get cybersecurity assistance while blue states are told to manage it themselves? Is the coordination between state and federal agencies, which is essential for defending critical infrastructure, now subject to the president's personal grudges?

The war with Iran is unfolding in ways Trump has spent months trying to conceal. The Intercept reported that Iranian ballistic missiles and drones have overwhelmed U.S. air defense systems across the Middle East, striking at least nine American military outposts and killing service members in Jordan and Iraq. A U.S. official told The Intercept that stocks of Patriot and THAAD interceptors are so depleted that American forces are not shooting down all incoming projectiles. The Royal United Services Institute calculated that more than 11,000 munitions were burned in the first 16 days of the war. CSIA warned it would take three or more years to return to prewar inventory levels.

Hegseth told the Senate Armed Services Committee in April that CENTCOM had every possible measure to protect troops. The same official who confirmed the air defense failures said Hegseth's claims "obviously were not true."

The Minnesota cyberattack is another piece of the same picture. Iran is striking American targets. They are reaching their targets. The president is telling the American public not to worry about it.

The absurdity of the position cannot be overstated. A sitting president, engaged in active warfare with a foreign nation, tells the citizens of that foreign nation's victim state that the attack was not carried out by the nation he is bombing. He attributes the compromise of water treatment controllers to municipal incompetence. He does this while his own cybersecurity agencies confirm the attribution. He does this while Iranian missiles are penetrating American air defenses across the Middle East.

The question is not whether Iran hacked Minnesota water systems. The evidence says it did. The question is what happens when the president of the United States chooses loyalty to his own ego over the truth that his own government has established. The water in Minnesota will keep running. The lesson from this moment is harder to filter out.