What we know about the cyberattacks on water systems

In this episode Talking Under Water the co-hosts discuss the recent coordinated cyberattacks targeting water and wastewater system PLCs across Minnesota and several other states, examining what happened, why it matters, and what utilities can learn from the incident. Bob Crossen and Alex Cossin break down reports that more than 30 Minnesota water systems were affected, with federal agencies now investigating activity across multiple states. The conversation explores how attackers targeted operational technology that helps run critical infrastructure such as pumps, wells, water towers, lift stations, and automated controls. The hosts emphasize the most important takeaway from the attacks: despite operational disruptions, utilities successfully maintained safe drinking water by switching to manual operations. They discuss the growing importance of resilience as the industry adopts more digital tools, automation, and artificial intelligence, while highlighting the need to preserve operator expertise and manual control capabilities. The episode also examines challenges facing smaller utilities, including limited staffing, funding constraints, and cybersecurity resources. Crossen and Cossin review guidance from agencies such as the FBI, CISA and EPA, including recommendations related to passwords, remote access, network segmentation, and operational technology security. They conclude by discussing ongoing questions surrounding the attacks, the role of manufacturers and communication during cybersecurity incidents, and the importance of supporting operators who helped maintain reliable service throughout the event. Show notes Connect your PLCs to the Internet: What could possibly go wrong? Cyber resilience and investment strategy in the water sector This federal agency scans water system cyber-vulnerabilities for free What recent cyberattacks reveal about securing water utility OT What is operational technology (OT)? Timestamps 00:00 – Introduction 00:44 – One of the largest coordinated cyberattacks on U.S. water systems unfolds 03:40 – Utilities switch to manual operations and keep water safe 04:42 – What the attacks reveal about workforce resilience and AI dependence 08:53 – Why manual controls remain critical for protecting water systems 12:39 – Federal guidance on cybersecurity, passwords, and system protections 16:56 – Who may be behind the attacks and what questions remain unanswered 25:06 – Housekeeping   About the Podcast     Talking Under Water is the premier podcast for the water industry, including municipal water and wastewater, residential water treatment, storm water management and erosion control. It is produced in coordination between Wastewater Digest (WWD), WaterWorld and Stormwater Solutions (SWS). The podcast covers topics under the One Water movement including the municipal and industrial water and wastewater, residential, stormwater and erosion control markets. Talking Under Water highlights news, trends, new technologies, industry discussions and interviews with experts across the municipal water industry. New episodes of the podcast are released every other week. Logo Images: Anatoly Tiplyashin / Romolo Tavani / stock.adobe.com.     Contact the Talking Under Water podcast editors by emailing [talkingunderwater@endeavorb2b.com](mailto:talkingunderwater@endeavorb2b.com) engaging with them on X @TUWpodcast. Join the conversation by commenting or using the hashtag #talkingunderwaterpod on social media.