Water utilities across seven states hit by coordinated cyberattacks
Source: The Wall Street Journal (paywall)
The FBI and EPA joint alert marks a shift: critical infrastructure operators are now facing cyberattacks that produce physical damage—flooding and service disruptions—rather than data breaches or surveillance alone. Water systems have moved from theoretical vulnerability to demonstrated operational risk. This raises immediate questions about whether utilities maintain adequate isolation between IT networks and SCADA/industrial control systems, and whether regulators will mandate the reporting requirements and minimum standards already required in electric utilities. The multi-state pattern suggests either a single sophisticated actor testing defenses or copycat attacks. Both scenarios will likely trigger congressional pressure for tighter operational security requirements and federal oversight expansion.