Water Utilities Face Mounting Cybersecurity Threats Amid Limited Resources and Support
-
Iranian-backed hackers targeted small water utilities like Aliquippa, PA to hack Israeli-made equipment, prompting renewed warnings about securing water systems against cyberattacks.
-
Some states have passed laws to improve water utility cybersecurity, but most utilities lack funding and expertise, while fending off aging infrastructure and clean water regulations.
-
Proposed EPA rules to audit state water system cybersecurity were suspended after lawsuits, leaving mainly voluntary standards in place that experts say have yielded little progress.
-
Congress is considering bills to help utilities address cybersecurity in different ways, like tailored requirements or sending federal experts to assist small/rural operators.
-
Amid limited progress legislatively, some private cyber firms like Dragos are offering free tools to small utilities, though competition for federal infrastructure funds remains high.