Cyber Threats to Water Supply: Survival in the Digital Age

Imagine the unsettling silence that would greet you one morning when you turn on your faucet and instead of the familiar gush of water, there’s nothing. While this may seem like a dystopian scenario, it’s a reality that’s becoming increasingly plausible. On March 18, 2024, the U.S. Environmental Protection Agency (EPA) issued a stark warning to the Governors of every state. The message was ominous: “cyberattacks from foreign actors threatens the safety and stability of our nation’s water infrastructure.”

These attacks are not just hypothetical threats, they are already happening, endangering the safety and well-being of millions. As we progress into the future, safeguarding our water will become critically important.

The rise in cyber threats against water and wastewater systems is alarming, fueled by sophisticated actors aiming to exploit any vulnerability. Recent incidents have shed light on these threats, with actors associated with the Iranian Government’s Islamic Revolutionary Guard Corps and the People’s Republic of China’s state-sponsored cyber group, Volt Typhoon, targeting U.S. critical infrastructure. These attacks are not random but are meticulously planned to disrupt essential services and gain political, economic, or strategic advantage.

The letter from the EPA highlights a specific vulnerability, the Unitronics programmable logic controller (PLC), which was found to be exploitable in November of 2023. PLC’s are instrumental in monitoring various stages of water and wastewater treatment, controlling pumps to fill tanks and reservoirs, and sounding critical alarms to operations.

The susceptibility of water systems to cyberattacks is particularly worrisome given their vital role in public health and safety. Complicating matters further, many water utilities are constrained by limited resources and technical capacity, making them prime targets for cybercriminals. The EPA, in conjunction with the Cybersecurity and Infrastructure Security Agency (CISA), has emphasized the pressing need for enhanced cybersecurity practices within the municipal water sector.

Clean water is essential for drinking, cooking, and hygiene, directly affecting our ability to maintain good health and prevent diseases. Waterborne pathogens can cause severe illnesses and outbreaks, highlighting the need for protective measures against any form of contamination, including those resulting from cyber-induced failures.

Water is not just a critical asset for individual survival, but it also fuels the economic engine of communities and countries. Industries from agriculture to manufacturing, energy production to pharmaceuticals, heavily rely on a consistent supply of clean water. A disruption in water services due to cyberattacks can trigger a domino effect, stopping production lines, impacting food supply, and causing substantial economic losses.

The Centers For Disease Control and Prevention (CDC) suggests several strategies to prepare for potential disruptions in municipal water supply:

“Make water safe. Even if a water from a municipal source becomes contaminated, there are ways an the individual citizen can take steps to ensure it is safe to consume or use. This includes, boiling, disinfecting, and filtering.”

The CDC also provides a few handy reference sheets, “Make Water Safe During an Emergency” and “Use Safe Water During an Emergency,” to print out and keep in case internet access is unavailable.

“Create and store an emergency water supply. The CDC suggests that keeping an ample supply of commercially produced bottled water is the safest way to make sure your water is uncontaminated.”

When it comes to quantity, the recommended amount is one gallon, per person, per day, for a minimum of three days. More water is needed if a member of the household is pregnant, sick, or if you are residing in a hot climate. It is also recommended to try storing as much as two weeks worth, eleven days beyond the minimum.

“Find other sources of water. If you’re caught unprepared, there are other ways obtaining water. Some of these sources include: Pools and spas (for hygiene, not consumption).”

The security of our nation’s water systems is not just a matter of smoothly running infrastructure, it affects public health, safety, and national security. As we navigate the complexities of the digital age, we must remain vigilant and proactive in protecting these essential resources from cyber threats. That being said, we must also ensure that we are prepared on an individual level to do without when our protective measures fail.

Our Thoughts

This unsettling reality underscores the urgency of crafting robust defenses against cyber threats, not only from a national security perspective but for the assurance of our basic survival. Water, in its essence, is life. Any disruption to its supply, especially through a malicious cyberattack, is a direct threat to our existence.

The sophistication of these attacks is alarming, exposing the vulnerabilities of our critical infrastructure. It’s high time we address this issue with the seriousness it deserves. A reactive approach will simply not suffice; we must be proactive and anticipate these threats before they manifest.

The highlighted susceptibility of PLCs, which play a vital role in our water infrastructure, is particularly troubling. It’s a glaring chink in our armor that needs immediate attention.

The constraints faced by water utilities in terms of resources and technical capacity further compound the problem. However, these limitations should not be an excuse for inaction but rather a catalyst for innovation and collaboration.

The CDC’s recommendations are a good starting point for individual preparedness. However, they should not be our only line of defense. We must foster a culture of awareness and preparedness, where each citizen understands their role in safeguarding our water supply.

The ripple effects of a water supply disruption, from health crises to economic losses, are a stark reminder of the interconnectedness of our world. Our survival and prosperity are hinged on the security of our water systems, and we must do everything in our power to protect them.

Let us know what you think, please share your thoughts in the comments below.

Source