The Environmental Protection Agency’s (EPA) Office of Inspector General is warning millions of Americans that their water may be vulnerable to cybersecurity attacks.
On Nov. 13, the agency released its Management Implication Report, highlighting vulnerabilities throughout the drinking and wastewater utility industry across the nation. The report conducted a “passive assessment,” which covered 1,062 drinking water systems that serve 193 million people across the United States, to identify “cybersecurity vulnerabilities.” It noted that its results from an October 8, 2024 scan identified 97 drinking water systems, which serve approximately 26.6 million users, as having “critical or high-risk cybersecurity vulnerabilities.”
The findings also explained that, “Although not rising to a level of critical or high-risk cybersecurity vulnerabilities, an additional 211 drinking water systems, servicing over 82.7 million people, were identified as medium and low by having externally visible open portals.”
A cyberattack on water might sound strange, but the goal of these assaults is to target the digital systems that support major infrastructures. It requires an …