--- title: Cybersecurity for Water and Wastewater Utilities description: "In our digital world, critical U.S. infrastructure faces a serious threat: Cyber-attacks. Learn how to strengthen your utility's cybersecurity." image: https://blog.envirosight.com/hubfs/Cybersecurity%20image%20for%20blog.jpg --- [![Envirosight Sewer and Drain Inspection Equipment](https://blog.envirosight.com/hubfs/Images/new_logo_dark.svg)](https://www.envirosight.com/) - [Products](https://envirosight.com/products/) - [Capabilities](https://envirosight.com/capabilities/) - [Clients](https://envirosight.com/clients/) - [Service](https://envirosight.com/service/) - [Learn](https://envirosight.com/learn/) - [Company](https://envirosight.com/company/) - [Contact](https://envirosight.com/contact/) - [Get a Demo](https://inbound.envirosight.com/demo_request) [Back to recent posts](https://blog.envirosight.com/) # Cybersecurity for Water and Wastewater Utilities Posted by [Jordan Fues](https://blog.envirosight.com/author/jordan-fues) on Mar 21, 2023 On February 5, 2021, Oldsmar, Florida’s water treatment plant operators found themselves under attack. A hacker infiltrated the facility’s system and attempted to increase the water’s level of sodium hydroxide to over 100 times its normal amount. While sodium hydroxide is commonly used in water and wastewater treatment to [remove heavy metal particles,](https://www.ncbi.nlm.nih.gov/books/NBK216460/) large amounts of sodium hydroxide are poisonous to humans and can be deadly.   While not the first of its kind, this cyber breach brought the imminent threat of cyberterrorism into the national spotlight.   “This incident is opening a lot of people’s eyes because public health is connected to systems that have cybersecurity vulnerabilities,” said [Miranda Mello](https://www.pewtrusts.org/en/research-and-analysis/blogs/stateline/2021/03/10/florida-hack-exposes-danger-to-water-systems), a senior water supply engineer at the Department of Natural Resources, regarding the cyber-attack.   The U.S. Cybersecurity and Infrastructure Security Agency (CISA) notes that around [75% of the U.S. population](https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience/critical-infrastructure-sectors/water-and-wastewater-sector) relies on public wastewater services, while over 80% of the country’s population receives potable water from public water services. According to CISA, a targeted cyber-attack could result in “large numbers of illnesses or casualties and/or a denial of service that would also impact public health and economic vitality.”  ### The State of Utility Cybersecurity Today ![Cybersecurity](https://blog.envirosight.com/hs-fs/hubfs/Cybersecurity%20image%20copy.jpg?width=1200&height=786&name=Cybersecurity%20image%20copy.jpg) Two years after the Oldsmar incident, the U.S. Environmental Protection Agency (EPA) is [sounding the alarm](https://www.epa.gov/newsreleases/epa-takes-action-improve-cybersecurity-resilience-public-water-systems) about the increased need for stronger cybersecurity for our utilities.   According to EPA Assistant Administrator for Water Radhika Fox, “Cyber-attacks against critical infrastructure facilities, including drinking water systems, are increasing, and public water systems are vulnerable. Cyber-attacks have the potential to contaminate drinking water, which threatens public health.”   This year, Congress appropriated funds to a [new EPA grant program](https://www.mswmag.com/online_exclusives/2022/12/amwa-welcomes-first-ever-appropriation-for-water-system-resilience-program?utm_source=newsletter&utm_medium=email&utm_content=Read%20more&utm_campaign=MSW230105) intended to help build public water systems’ resilience in the face of natural disasters and cyber threats. This program provides grants to assist water systems with improving their [resilience to extreme weather](https://blog.envirosight.com/how-municipalities-can-prepare-for-extreme-weather) or expanding their cybersecurity programs. EPA has also issued [new requirements](https://www.mswmag.com/online_exclusives/2023/03/news-briefs-epa-issues-new-requirements-for-water-system-cybersecurity) and [guidance](https://www.epa.gov/waterriskassessment/epa-cybersecurity-water-sector) for public water systems regarding increased cybersecurity measures.   ### Cybersecurity Points of Action Building cyber resilience may sound intimidating, especially if your crew is already stretched thin. Luckily, there are some simple solutions available that’re easily implemented by any utility.  - **Practice good cyber hygiene.** Use a unique password for every site you frequent and utilize [multi-factor authentication](https://support.microsoft.com/en-us/topic/what-is-multifactor-authentication-e5e39437-121c-be60-d123-eda06bddf661) whenever possible.  - **Learn how to identify potential scams.** Keep an eye out for emails or text messages from unknown senders, particularly those that ask for your personal information.  - **Update your operating system and software.** This ensures that your technology has the most recent safeguards in place.  - **Get advice from the experts.** [CISA](https://www.cisa.gov/sites/default/files/publications/FINAL_PDFEPUB_CISA%2520Services%2520Catalog%25202.0.pdf), [EPA](https://www.epa.gov/waterriskassessment/epa-cybersecurity-water-sector) and [other agencies](https://www.waterisac.org/fundamentals) offer free cybersecurity resources, including training opportunities, that are available to the public.  Looking for more ways to increase your utility's resilience? Check out Envirosight's blog post on how to prepare for extreme weather events. [![Read More](https://no-cache.hubspot.com/cta/default/530427/826d659d-65c5-4e39-90b9-709e5c6aecae.png)](https://cta-redirect.hubspot.com/cta/redirect/530427/826d659d-65c5-4e39-90b9-709e5c6aecae) Topics: [All Topics](https://blog.envirosight.com) [EPA](https://blog.envirosight.com/topic/epa) [Resources](https://blog.envirosight.com/topic/resources) [Health and Hygiene](https://blog.envirosight.com/topic/health-and-hygiene) [Emergency Planning](https://blog.envirosight.com/topic/emergency-planning) [Sewer Infrastructure](https://blog.envirosight.com/topic/sewer-infrastructure) [![Share on facebook](https://blog.envirosight.com/hs-fs/hubfs/facebook-icon.png?width=28&name=facebook-icon.png)](http://www.facebook.com/share.php?u=https://blog.envirosight.com/cybersecurity-for-water-and-wastewater-utilities&utm_medium=social&utm_source=facebook) [![Share on linkedin](https://blog.envirosight.com/hs-fs/hubfs/linkedin-icon.png?width=28&name=linkedin-icon.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.envirosight.com/cybersecurity-for-water-and-wastewater-utilities&utm_medium=social&utm_source=linkedin) [![Share on twitter](https://blog.envirosight.com/hs-fs/hubfs/twitter-icon.png?width=28&name=twitter-icon.png)](https://twitter.com/intent/tweet?original_referer=https://blog.envirosight.com/cybersecurity-for-water-and-wastewater-utilities&utm_medium=social&utm_source=twitter&url=https://blog.envirosight.com/cybersecurity-for-water-and-wastewater-utilities&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on email](https://blog.envirosight.com/hs-fs/hubfs/email-icon.png?width=28&name=email-icon.png)](mailto:?subject=Check%20out%20https://blog.envirosight.com/cybersecurity-for-water-and-wastewater-utilities&utm_medium=social&utm_source=email%20&body=Check%20out%20https://blog.envirosight.com/cybersecurity-for-water-and-wastewater-utilities&utm_medium=social&utm_source=email) ### Subscribe to Envirosight Updates ### Recent Posts ## About Envirosight Envirosight provides video pipeline inspection solutions to municipalities, contractors, departments of transportation, and civil/environmental engineers. Envirosight is committed to ongoing innovation, delivering products that enhance user productivity and inspection detail. Envirosight serves customers through a trained network of regional sales partners who deliver localized support and expertise with rapid turnaround.  #### Headquarters [111 Canfield Ave Randolph, NJ 07869](https://goo.gl/maps/fpZBKHxZpBcYKNEw8) #### Contact 866.227.9845 [mail@envirosight.com](mailto:mail@envirosight.com) #### The latest insights, delivered direct to your inbox. © Envirosight LLC. All rights reserved. Specifications subject to change without notice. Envirosight, Quickview, Jetscan, Verisight, ROVVER, Digisewer, Haloptic, Outpost, Cleverscan and Preferred Build-outs are trademarks of Envirosight. Quickview carries patents 6,538,732 and 7,009,698; others pending. [Privacy Policy](https://www.envirosight.com/privacy-policy/)[Terms of Use](https://www.envirosight.com/terms-of-use/) ![](https://dc.ads.linkedin.com/collect/?pid=298497&fmt=gif) ![](https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1072518429/?value=0&guid=ON&script=0) ![](https://dc.ads.linkedin.com/collect/?pid=298497&fmt=gif) ```json { "@context" : "http://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jordan Fues" }, "dateModified" : "", "datePublished" : "2023-03-21 21:17:11", "description" : "In our digital world, critical U.S. infrastructure faces a serious threat: Cyber-attacks. Learn how to strengthen your utility's cybersecurity.", "headline" : "Cybersecurity for Water and Wastewater Utilities", "image" : { "@type" : "ImageObject", "url" : "https://blog.envirosight.com/hubfs/Cybersecurity%20image%20for%20blog.jpg" }, "mainEntityOfPage" : { "@id" : "https://blog.envirosight.com/cybersecurity-for-water-and-wastewater-utilities", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "http://cdn2.hubspot.net/hubfs/530427/es_logo.jpg" }, "name" : "Envirosight" } } ```