Foreign adversaries, including those linked to Iran, China, and Russia, are increasingly targeting the United States' water and wastewater systems, exploiting vulnerabilities in aging infrastructure and control systems, according to a U.S. national security correspondent. These attacks aim to disrupt essential services, undermine public confidence, and probe critical infrastructure.
Recent incidents underscore the escalating threat. In January 2024, attackers manipulated the industrial controls of a water system in Muleshoe, Texas, causing a significant water spill. Weeks later, an Iran-linked hacking group claimed responsibility for breaching systems associated with California Water Service, a major utility, though no compromise to water treatment or distribution was found.
These systems are critical to public safety, economic prosperity, and national security, serving over 324 million Americans daily. Hospitals, schools, businesses, and military installations rely on uninterrupted access to clean water. However, the nation's more than 50,000 community water systems, many serving smaller populations with limited technical staff and budgets, often rely on outdated industrial control systems and third-party vendors, creating additional entry points for attackers.
Traditional cybersecurity measures, such as air-gapping systems from the internet, are no longer sufficient as utilities increasingly use remote monitoring and interconnected technologies. Experts suggest that advanced solutions are necessary.
The House Science, Space, and Technology Committee has explored scientific and technological solutions to bolster defenses. Recommendations include leveraging artificial intelligence for early threat detection, employing anomaly detection to distinguish malicious activity from routine operations, and implementing cyber-informed engineering to ensure system resilience even during partial network compromises. Secure-by-design technologies that eliminate vulnerabilities before deployment are also seen as crucial.
Congress is urged to continue supporting research, technologies, and partnerships that strengthen national cyber defenses to ensure the reliability and safety of water services across all American communities.