U.S. Officials Urge Governors to Boost Cybersecurity in Water Sector Amid Hacking Threats

In a concerted effort to defend the United States’ water infrastructure against growing cyber threats, U.S. National Security Advisor Jake Sullivan and Environmental Protection Agency (EPA) Administrator Michael Regan have reached out to state governors. They highlighted the critical nature of drinking water and wastewater systems and the current lack of cybersecurity practices that could mitigate potential cyberattacks. This communication underscores the essential role these water systems play in communities and the urgent need to adopt robust cybersecurity measures.

To address these threats, Sullivan and Regan have proposed a collaborative approach, including the establishment of a Water Sector Cybersecurity Task Force aimed at developing national strategies to reduce the risk of cyberattacks on water systems. This task force will also facilitate a virtual meeting on March 21, inviting governors to strengthen ties between government entities and the water sector. The initiative reflects a broader government effort to implement significant cybersecurity standards across the nation’s critical infrastructure.

The urgency of these measures comes in the wake of reported cyberattacks on U.S. water systems by Iranian and Chinese state-backed groups, as well as multiple ransomware attacks on water and wastewater facilities over the last decade. The attacks have highlighted vulnerabilities in critical infrastructure and the need for enhanced security protocols. The EPA, in partnership with the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI, has already recommended defense measures and launched a security scan program to help identify and mitigate security gaps in critical water infrastructure.