Minnesota IT Services reported a coordinated cyberattack on 30 municipal water systems on Thursday, and U.S. authorities attributed it to Iran the same day — the war's first claimed infrastructure front on American soil. [1]

Two things are verified, and they are not the same thing. The coordinated attack across 30 systems is the record. The perpetrator is an attribution claim by state officials, asserted before any forensic record, indicators of compromise, or federal technical statement has been published. [2]

The speed is the tension. Wartime attribution carries its own momentum — a named enemy, a homeland target, a conflict already looking for its next ledger. None of that makes the claim false. It makes it a claim, and the standard for accepting it should be the evidence, not the hour. Whether any operational-technology system was actually manipulated, or whether this was an IT-side intrusion dressed in worse, is unknown as of Thursday.

What would settle it exists in principle: published indicators, a federal technical statement, a forensic chain. None was in the record on July 30. Tehran's response had not yet become one either. Until the evidence is public, the honest sentence is the narrow one: 30 systems were hit, and officials named a country. [1]

-- ANNA WEBER, Berlin