Michael Klein discusses cybersecurity threats facing public water systems in The Water News Source. Recent cyberattacks have affected water systems in approximately a dozen states, including at least 30 systems in Minnesota. Although it does not appear that Pennsylvania was one of the states affected by the cyberattack, the Municipal Water Authority of Aliquippa was hacked in 2023 by an Iranian-backed cyber group. Federal and state agencies have taken steps to help safeguard water systems from cyberattacks. In 2025, the U.S. Environmental Protection Agency identified vulnerabilities at 277 water systems and worked to fix the issues with individualized solutions. The agency also announced more than $9 million in grant funding to help water systems protect drinking water from cybersecurity threats and improve resiliency for extreme weather events.
The U.S. Environmental Protection Agency, the Cybersecurity and Infrastructure Security Agency, and the Pennsylvania Public Utility Commission have recommended measures including limiting internet exposure of operational technology, replacing default passwords, requiring multifactor authentication for remote access, and verifying the integrity of system controls.
To read more, click here.