US govt urges state action against cyber threats to water systems

US government on March 19 issued a warning to state governors regarding a series of disruptive cyberattacks targeting water and sewage systems across the nation.

US Environmental Protection Agency (EPA) Administrator Michael Regan and National Security Advisor Jake Sullivan "sent a letter to all US Governors inviting state environmental, health and homeland security Secretaries to a convening by their deputies to discuss the urgent need to safeguard water sector critical infrastructure against cyber threats."

This gathering, which will be held on March 21, will aim to shed light on ongoing federal and state initiatives aimed at bolstering cybersecurity measures within the water sector.

The meeting will also delve into key areas where there are gaps in these efforts, emphasising the urgency for states and water systems to promptly take necessary steps.

EPA Administrator Michael S Regan said, “Drinking water and wastewater systems are a lifeline for communities, but many systems have not adopted important cybersecurity practices to thwart potential cyberattacks."

“EPA and NSC take these threats very seriously and will continue to partner with state environmental, health, and homeland security leaders to address the pervasive and challenging risk of cyberattacks on water systems.”

They specifically identified alleged Iranian and Chinese cyber attackers as culprits behind these attacks. The letter referenced a case where hackers, purportedly linked to Iran's Revolutionary Guards, successfully disabled a controller at a water facility in Pennsylvania.

Additionally, they mentioned a Chinese hacking group known as "Volt Typhoon" for compromising the IT infrastructure of numerous critical systems, including drinking water facilities in the US.

Meanwhile, Sullivan said,“The Biden Administration has built our national security approach on the foundational integration of foreign and domestic policy, which means elevating our focus on cross-cutting challenges like cybersecurity."

“We’ve worked across government to implement significant cybersecurity standards in our nation’s critical infrastructure, including in the water sector, as we remain vigilant to the risks and costs of cyber threats. We look forward to continuing our partnership with the EPA to bolster the cybersecurity of America’s water and wastewater systems.”

"These attacks have the potential to disrupt the critical lifeline of clean and safe drinking water, as well as impose significant costs on affected communities," the letter pointed out.

(With inputs from agencies)