Trump: It Wasn't Iran. It Was the Governor.

At Camp David, the presidential retreat in the mountains of Maryland, the president sat before his Cabinet on Friday and told the country who had really attacked its water systems. Not Tehran, he said, but Saint Paul. "I don't think it was an Iranian attack. I think Minnesota was behind it. I think the governor was behind it." And to make sure nobody misunderstood what his conclusion was based on, he added, "I blame Minnesota because they're grossly incompetent." Iran, he said, has bigger problems than worrying about Minnesota.

So on a quiet afternoon in Maryland, the world was told that an elected governor had sabotaged the drinking water system of his own state. You read a sentence like that twice, not because it's hard to understand, but because you stop trusting your own eyes.

Trump blames Minnesota Governor Tim Walz for the Iranian cyberattack on the state's water systems.

"I think I blame Minnesota ... the corrupt governor of Minnesota."

The intelligence community reached a very different conclusion. Multiple investigations paint an entirely different picture. It is more than likely that Iran was behind a coordinated attack on more than 30 municipal water systems across Minnesota, carried out on Sunday and Monday of this week. The FBI is investigating. Iranian responsibility has not been proven, but cybersecurity experts have been warning for months that Tehran has been targeting internet connected control systems used by water and power utilities.

The damage remained limited, less because of preparation than because of luck. One system was briefly knocked offline, another lost its remote sensors, and nobody received any malicious instructions to alter water consumption. In the small town of Braham, the public works department detected the attack early Monday morning, disconnected the system, and had the plant back online within about 90 minutes after securing it. During that time, the town's water tower supplied residents. Elsewhere, in Plymouth, attackers compromised industrial control equipment, but the water supply itself was never interrupted. As one expert put it, these were the easiest targets imaginable - small utilities whose control systems were exposed to the internet and protected by passwords that had never been changed.

Anyone familiar with this kind of operation recognizes the pattern. Ever since the war against Iran began on February 28, Tehran has been hitting the United States with attacks like these, most of them never making national headlines. The pattern goes back to late 2023, when a pumping station in Aliquippa, Pennsylvania, had one of its control systems compromised by a group linked to Iran's Revolutionary Guard Corps. The equipment had been manufactured by an Israeli company whose systems were targeted in several countries just as Israel launched its campaign in Gaza in response to the Hamas attack that killed about 1,200 people.

The goal of these attacks is rarely physical destruction. The real target is psychological, and the message is meant for 2 audiences. The first is the American public, which is supposed to feel vulnerable and begin questioning whether the war is worth the cost, even though the systems themselves have largely proven resilient. The second audience sits in Tehran. The people carrying out these operations want to show their superiors that they are contributing to the war effort. Their message is simple: anywhere can be reached, even the smallest town in America.

This is where the president steps in. By Thursday evening, the FBI had already announced that the attackers had struck water facilities in at least 7 states and disrupted operations. An attack spanning 7 states is difficult to pin on the governor of a single one, unless you no longer care whether your claims have any connection to reality. The president simply removes the other 6 states from the picture and keeps the only one led by a Democratic governor. When asked whether Iran was responsible, the FBI declined to say, responding only that it was focused on protecting critical infrastructure. That is how a federal law enforcement agency speaks when it knows what it cannot yet say. The president, meanwhile, says what no agency has supported.

An ancient teacher of rhetoric in Athens once boasted that he could make the weaker argument appear stronger. People considered him dangerous because he separated persuasion from truth. What was once celebrated as a rhetorical trick has now become the language of government. The weaker argument - that the president's own war has left America's water infrastructure vulnerable - is turned into the stronger one by claiming that a political opponent sabotaged the system instead.

The War That Nobody Wins

The choice of who gets blamed is no accident. The governor was the running mate of the losing presidential candidate in 2024, and his state has been on the president's radar for months. In January, the president threatened to invoke the Insurrection Act over protests against his mass deportation campaign. In March, Minnesota sued his administration to obtain evidence related to the fatal shootings of 2 U.S. citizens, Renée Good and Alex Pretti, by federal agents. Once someone carries that kind of political baggage, they become an easy suspect, even when the attack came from Tehran.

The governor rejected the accusation later that same day. He said the president knows exactly who is behind the attack and also knows that other states were hit as well. This, Walz said, is what modern warfare looks like, and it once again shows that there is no strategy for winning the war against Iran. If you blame the attack on your political neighbor, you no longer have to talk about the actual attacker. And if you stay silent about the attacker, you also avoid explaining how this war is supposed to end now that, in its fifth month, it has reached America's own water systems.

The authorities stressed that their assessment remains preliminary. Former intelligence officials consider it unlikely that the attackers were merely pretending to be Iranian, and so far nothing has undermined the prevailing assessment. If that assessment proves correct, this would rank among the most serious cyberattacks of the war. On Thursday, the agency responsible for protecting critical infrastructure reported a sharp increase in attacks of this kind and offered the simplest advice imaginable: disconnect vulnerable systems from the internet and change the default passwords.

In the end, America is left with a president who would rather declare his own governor the enemy than call the enemy exactly what it is. That saves him from confronting the most uncomfortable number of the day - 7 states - and the question that comes with it: What good is the most powerful military on earth if the enemy doesn't have to fight its way past it, but can simply walk through a forgotten password in a small town?