Cyberattacks Expose Vulnerabilities in US Water Systems

Recent cyberattacks targeting water systems across the United States have exposed significant vulnerabilities in the technology controlling critical infrastructure, prompting urgent calls for improved cybersecurity measures and the launch of new support programs for small utilities. While drinking water has remained safe, the incidents have disrupted operations, caused water pressure losses, and forced utility workers to intervene manually, raising concerns about the potential for more severe consequences in future attacks.

The attacks, which have been reported in at least 12 states, involved hackers gaining access to programmable logic controllers (PLCs) that monitor and control equipment such as pumps, valves, and water pressure. Federal law enforcement agencies, including the FBI and the Cybersecurity and Infrastructure Security Agency (CISA), are running incident response efforts. Officials suspect Iranian involvement but have not confirmed it definitively. The intrusions highlighted a long-standing issue: many municipal water systems, especially smaller ones, are configured for ease of access without adequate security, often using internet-connected equipment with weak or...