Detailed blog posting describing the attack is provided in the following link:
https://infracritical.com/p/ic-scid-00150-2026.08.02.01.php
Additional States have been identified as affected in this full report: https://infracritical.com/p/ic-scid-00150-2026.08.04.06.php
This observation from the blog posting is worth highlighting;
⚠ Critical Timeline Finding
CISA Advisory AA26-097A[10] was issued on April 7, 2026 — 111 days before the Minnesota attacks. The July 22 update explicitly named the additional manufacturers (Schneider Electric, Siemens) targeted in this incident, only 4 days before the first intrusions. The compressed window between the updated advisory and the attack strongly suggests the adversary either monitored the advisory to exploit non-compliant systems, or was already in a final pre-attack staging phase. Either hypothesis underscores the critical importance of immediate compensating control deployment upon advisory receipt.
NAESB is working on strawman procurement contract language that aims to address this specific need identified in the blog posting describing the MN Water system attacks, "the critical importance of immediate compensating control deployment upon advisory receipt"