American Water Works Company, Inc., the largest regulated water and wastewater utility in the United States, disclosed a cybersecurity incident on October 3, 2024, that has affected its computer networks and systems. The company, which serves over 14 million customers across 14 states and 18 military installations, promptly activated its incident response protocols after detecting unauthorized activity within its systems. To mitigate potential risks, American Water Works took immediate action by disconnecting certain systems and implementing protective measures to safeguard its operations.
In response to the breach, American Water Works has engaged third-party cybersecurity experts to assist with the containment and investigation of the incident. The company has also notified law enforcement and is fully cooperating with authorities as they conduct their inquiries. While the full scope of the cyberattack is still being assessed, American Water Works believes that none of its water or wastewater facilities or operations have been adversely impacted. The company is committed to restoring its systems as quickly as possible while ensuring that critical services remain intact.
As a precautionary measure, American Water Works has temporarily disabled its online customer service portal, MyWater, resulting in a pause in billing activities. The company has assured its customers that no late fees will be charged during the system’s unavailability, demonstrating its commitment to maintaining transparency and customer service amidst the ongoing situation. This incident has raised alarms about the increasing cybersecurity challenges faced by essential water infrastructure, with the Environmental Protection Agency (EPA) recently warning that cyberattacks on water utilities are becoming more frequent and severe.
Experts in the field emphasize the critical need for robust cybersecurity protections for vital services such as water supply. Akhil Mittal, senior manager of Cybersecurity Strategy and Solutions at Black Duck Software Inc., underscored the gravity of the situation, stating, “We’re not just talking about data breaches – this is about the safety of millions of people who rely on clean water every day.” As investigations continue, American Water Works is dedicated to addressing the incident thoroughly and ensuring the security and safety of its operations for the communities it serves.
