American Water cyberattack renews focus on protecting critical infrastructure
A cyberattack continues to affect the nation's largest regulated water and wastewater utility company, renewing a focus on the importance of protecting critical infrastructure
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.A cyberattack continues to affect the largest regulated water and wastewater utility company in the United States, renewing a focus on the importance of protecting critical infrastructure sites.
New Jersey-based American Water paused billing to customers as it announced the cyberattack on Monday. It said it became aware of the unauthorized activity on Thursday and immediately took protective steps, including shutting down certain systems. Water services have been unaffected as protections remained in place Wednesday.
The company — which provides drinking water and sewer services to more than 14 million people in 14 states and on 18 military installations — said it does not believe its facilities or operations were impacted by the attack, although staffers were working “around the clock” to investigate its nature and scope.
The attack against American Water appears to be an “IT focused attack” more than an operational one, according to Jack Danahy, vice president of strategy and innovation at Colchester, Vt.-based NuHarbor Security in Vermont.
“People haven’t traditionally thought of pieces of infrastructure, such as water and wastewater service as being prone to threats, but incidents like this shows how quickly problems could occur,” Danahy said. “As billing and other services have become more accessible to customers in recent years, they're now exposed to more types of risks and concerns that were not previously there.”
The U.S. Cybersecurity and Infrastructure Security Agency and the Environmental Protection Agency urged water systems to take immediate actions this year to protect the nation’s drinking water. About 70% of utilities inspected by federal officials recently violated standards meant to prevent breaches or other intrusions, the EPA said.