U.S. water utilities warned of cyberattack risks; EPA offers emergency response help

A recent cybersecurity simulation highlighted how a single attack on a U.S. water utility could cascade into widespread disruptions, affecting hospitals, data centers and other critical services. The study noted that many of the roughly 151,000 public water systems, especially smaller municipalities, operate with limited funding, outdated software and few cybersecurity experts, making them vulnerable to foreign‑backed hacking groups. The FBI has previously flagged intrusions into U.S. governmental networks, underscoring the real‑world threat.

In response, the EPA’s Office of Water Emergency Response and Cybersecurity issued a July 13 bulletin promoting its Strengthening Water Infrastructure for Tomorrow (SWIFT) initiative. SWIFT provides free technical assistance, risk‑assessment webinars and support for developing or updating Emergency Response Plans required under the Safe Drinking Water Act. The guidance covers physical security, cybersecurity, detection of malicious acts and strategies to mitigate impacts on drinking‑water, wastewater and stormwater systems.