March 21, 2024 — On Tuesday, the U.S. Environmental Protection Agency (EPA) and the White House National Security Council (NSC) issued a press release highlighting an urgent need to protect the nation’s water infrastructure from escalating cyber threats.

In a letter to all U.S. governors, EPA Administrator Michael Regan and National Security Advisor Jake Sullivan invited environmental, health, and homeland security leaders to discuss strategies for safeguarding critical water infrastructure. The virtual meeting will occur today.  EPA is sending meeting registration information to the states separately via email.

“Drinking water and wastewater systems are a lifeline for communities, but many systems have not adopted important cybersecurity practices to thwart potential cyberattacks,” said EPA Administrator Michael S. Regan.

Sullivan echoed these concerns: “We’ve worked across government to implement significant cybersecurity standards in our nation’s critical infrastructure, including in the water sector, as we remain vigilant to the risks and costs of cyber threats.”

The EPA and NSC are encouraging all states to participate in addressing this challenge. They will also work with water industry groups to establish a Water Sector Cybersecurity Task Force focused on reducing immediate risks to water systems.

The announcement comes amidst increasing cyberattacks targeting water and wastewater systems across the U.S. These attacks have the potential to disrupt access to clean water and impose significant costs on communities. The EPA, as the lead federal agency for the water sector, offers multiple resources to help water systems mitigate these risks.