Cyberattackers Put Small Water Systems at Risk
Systems remained safe in two states, but federal water-sector cybersecurity gaps remain unresolved.
by Sharad Swaney & Gavin Faivre, Co-Directors of Centered America
Hey everyone,
Water systems in Michigan and Minnesota remained safe after malicious cyber activity prompted a federal investigation, according to reporting from The Associated Press.
That is reassuring. It is also a warning.
The attacks reached infrastructure that people depend on every day, while a federal watchdog says important cybersecurity gaps in the water sector remain unresolved.
We know infrastructure reporting can feel technical until a failure reaches someone’s home. Our work is to make these risks understandable before that happens. If you value clear reporting about the public systems holding our communities together, please subscribe.
What happened.
The Associated Press reports that federal investigators responded after malicious activity affected water systems in Michigan and Minnesota. Officials said the systems remained safe, and the supplied reporting does not establish that drinking water was contaminated or service was disrupted.
That distinction matters. We should not exaggerate an incident to make people care about it.
But a safe outcome does not erase the vulnerability that attackers tested. It gives public officials an opportunity to act before a later intrusion produces a different result.
What an attack can do.
In an April 7 joint advisory, the Environmental Protection Agency, FBI, Cybersecurity and Infrastructure Security Agency, and National Security Agency warned that attacks on water and wastewater systems can disrupt operational controls, alter sensor information, and threaten public health.
Those are potential consequences described by federal agencies. They are not evidence that the Michigan or Minnesota incidents produced those harms.
That careful separation between demonstrated harm and documented risk is essential. Cybersecurity policy becomes harder when officials either minimize credible threats or inflate every intrusion into a catastrophe.
A safe outcome in two states is not proof of a safe system; it is a warning that defenses and luck must never be confused.
The neglected risk.
The Government Accountability Office reported in June that state-sponsored and criminal actors can disrupt water service and harm public health. It also found that federal water-sector cybersecurity gaps remain unresolved.
That finding turns separate incidents into a national governance question.
Small water systems should not be expected to carry a national-security responsibility alone. Federal warnings are useful, but warnings cannot substitute for clear standards, sustained technical assistance, effective coordination, and enough public investment to meet the threat.
The size of a water system does not reduce the consequence for residents if that system fails. People still need safe water. Schools, hospitals, local businesses, and emergency services still depend on reliable public infrastructure.
A strong public sector exists for risks like this. The federal government can see threats across state lines, coordinate intelligence, set expectations, and help communities that cannot build that capacity by themselves.
What responsible action looks like.
The immediate response should begin with facts. Investigators must determine what happened in Michigan and Minnesota, which systems were affected, what attackers accessed, and whether the same methods threaten other communities.
The longer response must address the gap identified by the GAO. Congress and federal agencies should treat water cybersecurity as essential infrastructure protection, not an optional technology upgrade.
That means pairing accountability with support. Requirements without resources can leave small systems with a mandate they cannot fulfill. Funding without clear standards can leave the underlying vulnerability intact.
There is a reasonable counterargument here. The systems remained safe, so some readers may see another federal warning as unnecessary alarm. We understand that concern. Public trust is damaged when every risk is presented as an emergency.
But prevention often looks uneventful when it works. The goal is not to frighten people about their drinking water. It is to make sure the public systems protecting it are not left waiting for a more damaging incident.
Why we are asking.
Four federal agencies issued one joint warning, yet the GAO still says federal gaps remain unresolved. Following that distance between official warnings and public action takes sustained, independent work.
$8 a month or $50 a year. No PAC money. No corporate sponsors. No dark donors. Just readers who believe independent reporting and democratic action are worth supporting.
The quiet part.
When Washington identifies a national threat but leaves major gaps unresolved, responsibility falls toward the local systems with the least room for error.
That is a policy choice. We can continue reacting to intrusions one community at a time, or we can build a public response equal to the risk.
Our democratic institutions earn trust by protecting the ordinary systems people rely on. Safe water is one of those systems. Defending it requires competent government, honest reporting, and sustained attention after the immediate headlines fade.
Please restack this post. Sharing helps this reporting reach people who may never see a federal advisory or watchdog report but deserve to understand what is at stake.
Thank you for fighting.
Sharad & Gavin | The Centered America Team
Donate to Centered America today or become a paid subscriber!
OUR MISSION AT CENTERED AMERICA
Centered America is a 501(c)(4) organization founded to unite disillusioned Democrats, Republicans, overlooked communities, and everyday Americans to rebuild the United States of America into a country that truly represents the people.
We are committed to upholding constitutional and democratic principles, fighting oligarchy and fascism, promoting activism, reporting the truth, and resisting the Trump administration’s dangerous agenda.
To achieve this, we focus on reconnecting with open-minded voters, addressing their concerns directly, amplifying independent journalism, and providing resources that empower citizens to actively engage in protecting our democracy.
Contact Us
Email us at info@centeredamerica.org.
Sources