Newsletter #439 - August 5, 2026

CISA Warns Water Systems of Increased PLC Cyberattacks

The Cybersecurity and Infrastructure Security Agency (CISA) is warning water and wastewater utilities about a significant rise in cyberattacks targeting internet-exposed programmable logic controllers (PLCs). According to CISA, threat actors have been changing PLC passwords to lock out operators and altering IP addresses to disconnect equipment, leading to operational disruptions, boil water notices, and extended periods of manual system operation.

CISA notes that utilities of all sizes are being targeted, including organizations with mature cybersecurity programs. The agency cautions that undocumented remote connections, such as cellular modems installed by vendors or integrators, may create hidden vulnerabilities.

To reduce risk, CISA recommends immediately removing PLCs and other operational technology (OT) assets from direct internet exposure, enabling strong password protection, replacing default credentials, restricting remote access to approved devices, and maintaining clean backup images of PLC configurations.

Water utilities are encouraged to review their OT network exposure and cybersecurity practices and to report any suspected incidents to CISA or the FBI.

To report a cyber incident, contact CISA’s 24/7 Operations Center (contact@cisa.dhs.gov), or call 1-844-Say-CISA (1-844-729-2472). Please see Reporting a Cyber Incident for more details or contact FBI’s Internet Crime Complaint Center (IC3) or your local FBI field office.

When available, include the following information regarding the incident: 

• Date, time, and location of the incident
• Type of activity
• Number of people affected
• Type of equipment used for the activity
• Name of the submitting company or organization, and a designated point of contact

For any additional support, contact the Environmental Protection Agency’s Cybersecurity Technical Assistance Program for the Water Sector or your CISA Regional Office.

Featured Video

What we know about the cyberattacks on water systems in 7 states

PBS NewsHour

"According to the FBI, at least seven states have now been targeted in a growing wave of cyberattacks on critical water infrastructure across the country. Federal officials now reportedly believe Iran is the likely culprit. Liz Landers discussed more with Cynthia Kaiser, a former deputy assistant director of the FBI’s cyber division currently at Halcyon."

Read the full transcript of this interview on PBS News.

Missed our last webinar? Watch the recording!

This webinar, recorded in July 2026, provides a practical overview of communication strategies wastewater utilities can use to support compliance and build public trust. Participants will explore common communication challenges faced by utilities and learn about publicly available resources for improving public communication, notification, and engagement. This recording also includes a demonstration of our free search tools at WaterOperator.org to find additional free resources and training events.

This webinar is part of a series that covers topics relevant to wastewater operators, including funding, asset management, compliance, and water quality.

For informational purposes only. We are unable to offer certificates for watching a video recording.

Recordings of our previous webinars:

• Monitoring, Sampling, and Data Management for NPDES Compliance | June 2026
• Lagoon Wastewater Systems Practical Tools and Resources for Compliance | April 2026
• Energy Optimization and Cost‑Saving Strategies for Wastewater Utilities | March 2026
• Workforce Development & Succession Planning for Wastewater Utilities | February 2026
• Essential Safety Resources for Wastewater Operators | December 2025
• Community Engagement Resources for Wastewater Utilities | November 2025
• From Waste to Resource Biosolids Management References for POTWs | August 2025

Featured Video

Keeping Up With PFAS Rules Is Nearly Impossible

waterloop

"PFAS regulation now has more moving parts, deadlines, and compliance pathways than ever, but the bottom-line advice for water utilities is simple: keep moving.

In this episode, Amanda Canida of Black & Veatch explains how utilities can navigate the regulatory complexity while advancing the treatment projects needed to meet federal drinking water standards. Federal monitoring data indicates that roughly 10 percent of public water systems could be affected by the four-parts-per-trillion limits for PFOA and PFOS. Utilities can pursue cleaner water sources or blend supplies, but many are preparing to install treatment at a central plant or directly at an individual well.

EPA has proposed retaining the PFOA and PFOS limits while restarting the regulatory process for several other PFAS compounds and creating a streamlined exemption pathway for systems that need more time. Once that exemption rule is finalized, utilities would have 180 days to apply and may need interim measures such as temporary treatment, alternate water supplies, source-control planning, or public education.

The challenge is increasingly financial, as construction costs have risen and demand has grown for the equipment and treatment media needed to remove PFAS. Utilities are already slowing other capital projects, shifting money between priorities, and setting aside contingency funds to cover emerging treatment needs. Canida outlines how desktop evaluations and laboratory testing can help systems compare granular activated carbon and ion exchange before committing to longer pilot studies. Utilities must also calculate when treatment needs to be operating—not merely completed—to keep their annual PFAS averages below the federal limit by April 2029.

The path forward is to pursue funding now, prepare customers for difficult decisions, and design treatment systems that can adapt as regulators address more of the thousands of PFAS compounds under review."

AWWA Scholarship Program Applications

Applications for all 2027-2028 scholarships are now open through November 6, 2026! 

The Water Equation Scholarships program supports students and operators at the beginning of their work in water. Scholarships are available through AWWA, corporate partners, and the Water Operator Continuing Education Fund.

The Water Operator Continuing Education Fund supports non-traditional education programs, including trade schools, certification programs, and community college coursework for water operators. 

• Applications are accepted on a monthly basis throughout the year.

• All applications are reviewed by a committee of water sector professionals. 

• Awards are made on a rolling basis throughout the year. 

• Award amount varies by program and course.

• To finalize your application, you will need to enter the code WOE. 

The Water Operator Continuing Education Fund does not fund scholarships for undergraduate, graduate, or PhD programs. To apply for academic scholarships, visit the Water Equation Scholarships webpage. Water Equation offers 23 merit-based science, technology, engineering, and match academic scholarships for higher degrees.

For questions about specific program eligibility, contact Margo Hatton (mhatton@awwa.org), CFRE – Senior Manager Development and Donor Relations.

Learn about more continuing education opportunities and section specific scholarships available through your local AWWA section.

Tap Talk

The Septage Catch-22: When Better Maintenance Creates Bigger Problems

The more people maintain their septic systems, the more septage gets generated. But, there’s increasingly no where for it to go. Sara Heger, a decentralized wastewater expert with NOWRA, is back on the show to break down why septage disposal is becoming a bigger headache, what PFAS and other contaminants have to do with it, and what it might actually take to fix this challenge.

Featured Events

In the News

• Using Operational Data To Prioritize Water Infrastructure Investments | Water Online
• An Arizona desert town may run out of water. Others could face the same fate. | The Washington Post
• Great Lakes Water Authority tackles a troubled water main corridor with $81 million fix | Smart Water Magazine
• Colorado Town Declared Abandoned Amid Water Crisis: What It Means | Newsweek
• Cities embrace water conservation efforts as Lake Powell reservoir faces crisis | USA Today
• How volunteer cyber experts are helping protect rural water systems | Cybersecurity Dive
• Beyond the MCL: Manufacturing Validation for PFAS | Water Finance & Management
• Authorities investigating a coordinated cyberattack against Minnesota water systems | Cybersecurity Dive
• Pierce County sewage spills and new tracking website | Tacoma News Tribune
• “Our research has shown that transparency, competence and experience affect public attitudes about recycled water” | Smart Water Magazine
• The EPA looks to override state efforts to crack down on toxic water pollutants | ScienceLine
  • Industries Push Trump Administration for Preemption of State PFAS Laws | Liskow & Lewis, APLC
    • The information provided in this blog post from Liskow & Lewis, APLC can help to explain what that could look like and we wanted to include it with a disclaimer that we cannot endorse any of the opinions or services on this blog.

Recent Blog Posts at WaterOperator.org

Did you miss our last newsletter? Click here to view the archive.

WaterOperator.org is a free service, grant-funded to support small community water and wastewater operators with comprehensive resources and information in one easy-to-use place. We also serve the 800+ training, primacy, and technical service organizations, by helping operators get to their information. We aren't selling or advertising anything. Call us at 1-866-522-2681 for assistance.

Visit our other websites:

Click here to unsubscribe | Sent to: _t.e.s.t_@example.com

Illinois State Water Survey, 2204 Griffith Drive, Champaign, IL 61820, United States