The Threat of Cyberattacks on Water Systems

Water is an imperative component of life and a critical infrastructure sector. We can sometimes take water for granted. However, its management and distribution are vital for public health, agriculture, industry, and ecosystem stability, making it essential to safeguard and prioritize water resources worldwide.

However, what if our water supply suddenly ceased functioning or, worse, became unsafe for consumption?

Well, US government officials have stated that the Chinese and Iranian governments are targeting the U.S.'s water systems through cyber attacks, which could disrupt access to clean water and pose a significant cost to communities affected.

If you recall the Flint Water Crisis in Michigan, it is stated that at least 87 people were sick, and 12 people died due to contaminated water. While this crisis wasn't inflicted by outside government, it is quite alarming what a full-blown and planned cyber attack inflicted on communities could do and the damage that would be caused by it.

Why have governments decided to target specifically water systems?

EPA officials have stated that the water sector is the perfect target for disrupting United States communities. They state that "water is a lifeline critical infrastructure sector and often lacks the resources and technical capacity to adopt rigorous cybersecurity practices" (Verge).

Just recently, in November, Iranian officials could infiltrate water systems because of a vulnerability. Since then, Government officials have been pushing for more robust security measures around utilities to ensure hackers cannot attack again.

The White House and Environmental Protection Agency warned American governors about the ongoing threat. As an EPA Administrator, Jake Sullivan stated:" "We need your support to ensure that all water systems in your state comprehensively assess their current cybersecurity practice" (CNN).

What are users saying about this attack?

In a Reddit conversation, users expressed their feelings about the potential attack. One user emphasized the vulnerability of vital infrastructure, particularly water systems, to cyberattacks, highlighting the insufficient attention given to operational technology (OT) security.

Others stated that the physical infrastructure, such as sensors and machinery, is increasingly vulnerable to remote manipulation. Another user suggested that if connectivity to the internet is necessary, systems should be on isolated intranets accessible only in predetermined locations. Additionally, criticism was directed at both private companies and government entities for inadequate investment in cybersecurity measures. Another user attributed these vulnerabilities more to corporate greed and lack of funding than the government's lack of security skills.

Overall, cyber attacks continuously evolve and are now being used to target other countries. This issue also illuminates that robust security measures are imperative to protect critical data and infrastructure. Infiniwiz will keep you updated as this story continues to develop.