|
Newsletter #436 - June 30, 2026 |
|
|
|
|
 |
Strengthening Cybersecurity in the Water Sector
|
|
Cybersecurity has grown to be a critical component of protecting the nation’s water and wastewater systems. As these systems increasingly rely on digital technologies to monitor and manage operations, they become more vulnerable to cyber threats that can disrupt services, compromise water quality, and impact entire communities. By identifying vulnerabilities, improving response capabilities, and promoting best practices, cybersecurity efforts help ensure that water utilities can continue to safely deliver clean drinking water and treat wastewater even in the face of evolving threats.
The U.S. Environmental Protection Agency (EPA), and partners like the Cybersecurity and Infrastructure Security Agency (CISA), has consistently emphasized the need for preparedness against all cyber risks by providing tools, training, and technical support to strengthen resilience for systems. This newsletter will highlight cybersecurity resources that can assist water and wastewater personnel in their continued efforts to protect our infrastructure from the increased risk of cyberattacks.
Stay Informed! Sign up for email alerts:
|
|
|
|
|
 |
Try our free, self-paced cybersecurity course! |
|
In just one hour, course participants will learn about water sector threats, basic cybersecurity measures, incident response, system resilience, and valuable resources, with the goal of fostering a culture of cybersecurity within their organizations. All students will receive a 1-hour class certificate for their participation.
Regardless of the size of the water system, this course empowers everyone, from field workers to office staff, to contribute to maintaining a reliable and resilient water system.
This course was developed with MassDEP funding through a partnership with UMass. The course content was created by Andrew Hildick-Smith. Please note that Massachusetts operators should take this version of the course.
|
|
|
|
|
|
|
 |
Register for EPA's 2026 National Cyber Drill |
|
Join the U.S. Environmental Protection Agency (EPA) for the 2026 National Cybersecurity Drill on Wednesday, July 8, 2026 at 1:00 pm - 3:00 pm EDT. This year’s exercise is designed to challenge drinking water and wastewater utilities to maintain critical system functions in an environment where telecommunications and internet access are no longer available.
"The exercise is built around a simulated scenario in which cyber and/or physical incidents degrade or disable commercial telecommunications infrastructure, internet service providers, and associated systems. As a result, participating organizations must operate in a “disconnected” environment with limited or no access to Supervisory Control and Data Acquisition (SCADA) remote connectivity, cloud-based services, email, Voice over IP (VoIP), and other digital communication tools. This exercise is designed to strengthen sector-wide resilience by testing operations under progressively degraded conditions. It enables participants to identify barriers and dependencies while reinforcing continuity of safe and reliable water and wastewater services in the absence of telecommunications and internet connectivity."
Continuing Education Units (CEUs) will be provided in most states. |
| Register Now |
|
|
|
|
Featured Video |
 |
Water Sector Threat Briefing: Ongoing Cyber Threats and Preparedness
MassDEP
"On Thursday, May 21, 2026, MassDEP Drinking Water Program (DWP) held a Water Sector Threat Briefing focused on Ongoing Cyber Threats and Preparedness. Detective Lieutenant Edward Keefe from the Commonwealth Fusion Center delivered a brief, high-level overview of the threats targeting critical infrastructure including water sector. Additionally, the DWP shared important resources, guidance, and support tools designed to help water systems improve resilience and ensure compliance." |
|
|
|
|
Recent EPA Cybersecurity Advisory: |
|
"The U.S. Environmental Protection Agency (EPA) is advising water and wastewater systems to consider the risks of disclosing sensitive operational information following multiple public records requests from artificial intelligence (AI) service providers, as reported by the WaterISAC and the American Water Works Association (AWWA).
In at least one instance, an AI service provider requested “all SCADA logs for 2026 for all treatment, distribution and wastewater management systems.” The requestor also indicated they were seeking “daily or hourly historical logs” for specific environmental and physical process indicators, including inflow and outflow water volumes and flow rates, aggregate water quality baseline metrics, historical reservoir and tank storage levels, and aggregate daily energy consumption or equipment run-times.
This type of information carries significant operational sensitivity given the insight it provides to a utility’s operations. EPA concurs with the WaterISAC’s and AWWA’s recommendation that water and wastewater utilities recognize that the aggregation of operational data across multiple utilities has the potential to reveal patterns, vulnerabilities, and system behaviors in the water sector. Such data, if obtained with malicious intent, could be used to jeopardize continuity of service, endangering public health and national security.
EPA encourages water sector utilities to evaluate the potential sensitivity of information requests and to make risk‑informed decisions about whether—and under what conditions—to respond, consistent with applicable state information protection laws."
|
|
|
|
|
Featured Podcast |
 |
The systems that keep water flowing are more connected than ever, and more exposed to cyber risks
Federal News Network
"Cyber threats are moving beyond data and into the systems people depend on every day, including water and wastewater infrastructure. A new GAO report finds persistent vulnerabilities, shaped by uneven resources, aging systems, and limits on federal oversight. Here to break down the findings and recommendations is Dave Hinchman, director of information technology and cybersecurity at the Government Accountability Office."
Watch Hinchman deliver testimony before the U.S. House of Representatives' Committee on Science, Space and Technology about the cybersecurity of drinking water and wastewater systems.
|
|
|
|
|
Cybersecurity News & Resources |
|
|
|
|
|
|
Featured Cybersecurity Event |
|
|
|
Insider Threat Mitigation Webinar
July 9, 2026 | 3:00 PM ET
U.S. Environmental Protection Agency
This free webinar, hosted by EPA and CISA, will examine the potential consequences of insider actions, discuss practical and cost-effective strategies to mitigate associated risks, and highlight tools and resources available at no cost from EPA and CISA to support utilities in strengthening their security posture and operational resilience.
Attendees will learn about the potential threats posed by insiders for drinking water and wastewater systems. Insiders are individuals with authorized access to a facility, such as current or former employees, contractors, or other trusted partners, who may intentionally or inadvertently compromise system operations.
Questions?
EPA Office of Water Emergency Response and Cybersecurity
OWERC-Outreach@epa.gov
|
|
|
|
|
|
|
Recent Blog Posts at WaterOperator.org |
|
|
 |
|
Lagoon Wastewater Systems Practical Tools and Resources for Compliance
Read Here » |
|
|
 |
|
Energy Optimization and Cost‑Saving Strategies for Wastewater Utilities
Read Here »
|
|
|
|
|
|
Groundwater & Well Care for Public Water Systems is a free online course from WaterOperator.org. Certificates are provided and the course is currently pre-approved for 2 hours continuing education credit in a number of states.
Click here to learn more. |
|
|
|
|
|
|
|
|
|
WaterOperator.org is a free service, grant-funded to support small community water and wastewater operators with comprehensive resources and information in one easy-to-use place. We also serve the 800+ training, primacy, and technical service organizations, by helping operators get to their information. We aren't selling or advertising anything. Call us at 1-866-522-2681 for assistance. |
|
|
|
|
|
Visit our other websites: |
|
|
|
|
|
|
|
Click here to unsubscribe | Sent to: _t.e.s.t_@example.com
Illinois State Water Survey, 2204 Griffith Drive, Champaign, IL 61820, United States |
|
|
|
|
