Commentary: The cybersecurity risk to our water supply is real. We must prepare.

WASHINGTON POST • January 4, 2022

In October, the FBI, National Security Agency, Cybersecurity and Infrastructure Security Agency and Environmental Protection Agency warned that U.S. water and wastewater systems are being targeted by “known and unknown” malicious actors. Their warning is not theoretical. In February, hackers breached a water-treatment system in Florida and attempted to raise the level of lye in the water more than 100-fold to poisonously high levels. An alert employee stopped them. This problem can be addressed with government resources and closer collaboration with industry. The American Water Works Association has outlined regulatory options. When industry is asking for federal oversight and standards, you know something is broken. We need to get ready. Make no mistake, another attack is coming. We just don’t know when or where.