HUNTSVILLE – In the past year, one in three water utilities experienced at least one cyber incident.
A 2024 EPA review also found that 70% of surveyed systems failed to meet basic security standards.
“Cyber threats to water systems are no longer theoretical — they are active, widespread, and growing in sophistication,” said Nick Sellers, chief operations officer of the McCrary Institute. “Whether you’re managing a rural water system or building the networks that support them, we hope you leave today with real insight, new relationships, and a few key next steps.”
To address those critical cybersecurity issues, Auburn’s McCrary Institute for Cyber and Critical Infrastructure Security hosted a first-of-its-kind summit Thursday in Huntsville aimed at protecting Alabama’s water systems from the increasing threat of cyber attacks.
Like so many systems critical to the way our state and nation run, water systems often find themselves outmatched in cyberspace by ransomware gangs, cyber criminals and nation-states. The effects have very real consequences for the citizens across Alabama and the nation who rely on safe drinking water.
Bringing together those who run the water plants with government, industry and academic leaders, the summit focused on helping those managing our water systems have the tools, funding and knowledge they need to protect their systems.
“At Auburn University, we created the McCrary Institute for Cyber and Critical Infrastructure Security with one purpose: to defend the systems that power our national and economic security — and that includes your water systems,” Sellers said. “Today we brought together a whole host of leaders from the public and private sectors and, that’s critical to not only make sure you have access to the funding and services you need, but also that we continue to build the community dedicated to protecting the citizens of Alabama and the nation.”
The event featured a keynote presentation by Alabama’s Chief Information Security Officer Chad Smith who walked utility leaders step-by-step through the ways they can gain visibility on what’s happening inside their systems, practical steps to ensure their systems are more secure and pointed towards federal funding they can take advantage of to begin or continue their cybersecurity journeys.
“We know those who are operating our state’s water systems have a lot to deal with so today, along with the McCrary Institute, we wanted to help them understand the fundamental things they can do and the many of us here to help them protect their people, preserve their reputation and secure the needed financing so they can protect their systems,” said Smith.
The group also heard from John Garstka, director for Cyber Warfare within the Deputy Assistant Secretary of Defense for Platform and Weapon Portfolio Management, Office of the Under Secretary of Defense for Acquisition and Sustainment, Department of Defense, who stressed the importance of the risk facing our nation’s critical systems in cyberspace.
More than 100 people gathered at the Auburn University’s Research and Innovation Campus in Huntsville for the summit.
For more information on how the McCrary Institute can provide cybersecurity services, help entities apply for federal grants or provide advice to help critical infrastructure owners and operators navigate the many cybersecurity needs and services out there, click here.
By the numbers: Cybersecurity threats to water systems
- The U.S. operates over 150,000 public water systems, many serving small towns and rural communities.
- A 2024 EPA review found that more than 300 systems, affecting 110 million Americans, had known cybersecurity vulnerabilities. 70% of surveyed systems failed to meet basic security standards
- In the past year, one in three water utilities experienced at least one cyber incident according to cybersecurity company Fortinet. The sector is now a prime target for both nation-state actors and criminal groups.
Don’t miss out! Subscribe to our email newsletter to have all our smart stories delivered to your inbox.