https://www.americancityandcounty.com/wp-content/themes/acc_child/assets/images/logo/footer-logo.png
  • Home
  • Co-op Solutions
  • Hybrid Work
  • Commentaries
  • News
  • In-Depth
  • Multimedia
    • Back
    • Podcast
    • Latest videos
    • Product Guides
  • Resources & Events
    • Back
    • Resources
    • Webinars
    • White Papers
    • IWCE 2022
    • How to Contribute
    • Municipal Cost Index – Archive
    • Equipment Watch Page
    • American City & County Awards
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Cookie Policy
    • Privacy Statement
    • Terms of Service
American City and County
  • NEWSLETTER
  • Home
  • Co-op Solutions
  • Hybrid Work
  • Commentaries
  • News
  • In-Depth
  • Multimedia
    • Back
    • Podcasts
    • Latest videos
    • Product Guides
  • Resources/Events
    • Back
    • Webinars
    • White Papers/eBooks
    • IWCE 2022
    • How to Contribute
    • American City & County Awards
    • Municipal Cost Index
    • Equipment Watch Page
  • About Us
    • Back
    • About Us
    • Contact Us
    • Advertise
    • Cookie Policy
    • Privacy Stament
    • Terms of Service
  • newsletter
  • Administration
  • Economy & Finance
  • Procurement
  • Public Safety
  • Public Works & Utilities
  • Smart Cities & Technology
  • Magazine
acc.com

Smart Cities & Technology


Pixabay

News

Cybercrime is on the rise, and water treatment plants are particularly vulnerable

Cybercrime is on the rise, and water treatment plants are particularly vulnerable

  • Written by Andy Castillo
  • 28th July 2022

With most town water treatment plants serving less than 50,000 people, they’re facing a problem: budgetary constraints preventing administrators from investing in their digital defenses, making them prime targets for cybercriminals.

“It’s definitely becoming a trend—possibly because ransomware has become a thing now where people can make money. Water plants do matter to the general public,” said Loney Crist, vice president of cyber security software development at IPKeys Power Partners, a New Jersey-based cybersecurity firm. “When you get a ransomware attack, it can be tens of thousands of dollars or hundreds of thousands of dollars.”

Some choose to pay the ransom; others get another system up and running: “It comes down to how much they think it’s going to cost to get their system going,” he said. “The majority of water plants are going to have some sort of remote access. And that tends to be the biggest vulnerability.”

Smaller systems, especially, don’t have enough revenue to pay for a plant’s physical and cybersecurity upgrades. And inside a system’s perimeter defenses, “Once you get on a network, they’re fairly flat. They’re fairly small networks,” Crist said. “They haven’t seen a need to segment them.”

Beyond the monetary concern, there’s a greater fear of the physical harm that could come to constituents if a cybercriminal were able to gain unimpeded access to a water treatment plant’s system digitally.

Last year, for example, a hacker broke into the Oldsmar, Fla. community water treatment plant and remotely turned up the levels of sodium hydroxide. At high levels, sodium hydroxide can seriously damage the human tissue it touches. Operators at the plant intervened manually before anything happened, preventing catastrophe. But the incident revealed an important vulnerability in systems across the United States.

It’s one that many managers are moving to address.

“Cybersecurity is an onion in terms of how much you can spend on it,” Crist said. “There are very basic levels of things you can do just to help.”

Among those easily implemented security measures that can be taken, Crist said zero-trust measures and multi-factor authentication are “very basic things you can do” right away. And “If your password does leak, they can’t get in anyway,” he continued. The idea is to digitally “lock your door,” prompting would-be attackers “to go to the next door over and find a softer target.”

Educating staff members about the dangers of cyberattacks like phishing and email scams is another easy and inexpensive step people can take.

“Social engineering is generally the way they get into these systems,” Crist said. 

Of all the challenges, encouraging cooperation and information sharing between water organizations is perhaps the most difficult for those working to mitigate the challenge to overcome.

“Water companies tend to be nonprofit. … They don’t tend to share information,” Crist continued. “That’s something the electric industry and power generation has been doing for a while.”

Given the fiscal challenges and the educational shortfall pervasive in the industry, bolstering the defenses of water treatment plants is something the federal government has taken note of. Earlier this year, the Biden-Harris Administration extended the Industrial Control Systems Cybersecurity Initiative to encompass the water sector. 

The plan was developed in concert with the Environmental Protection Agency, and assists plant operators “with deploying technology that will monitor their systems and provide near real-time situational awareness and warnings. The plan will also allow for rapidly sharing relevant cybersecurity information with the government and other stakeholders, which will improve the sector’s ability to detect malicious activity,” according to a brief from the White House. “This sector is made up of thousands of systems that range in size from the very small to ones that service major metropolitan cities that have little or no cybersecurity expertise and are unsure what steps they should take to address cyber risks.”

Tags: homepage-featured-1 homepage-featured-2 homepage-featured-4 Public Works & Utilities Smart Cities & Technology Public Works & Utilities Smart Cities & Technology News

Most Recent


  • Amid spike, federal transportation department launches initiative to curb traffic-related deaths
    While stay-at-home orders might be a thing of the past, the pandemic’s impact is still felt daily through expectations to socially distance, the prevalence of masks in high risk areas like hospitals, and the stubbornly high annual rate of traffic-related deaths. Traffic fatalities hit a 16-year high in 2021, and preliminary data points to a […]
  • These 10 American cities are well prepared for a tech-based future
    From smart devices to electric vehicles, the success of technological advancements rely on municipal grids and infrastructure. Some cities are better equipped for the future than others. A new analysis from the tech company ProptechOS ranks the top 10 American cities best positioned for a “smart city future.” “But new technologies can only support us […]
  • public health
    How public health can build a “one health” infrastructure for the future
    Public health challenges—like antibiotic resistance, vector-borne disease and a global pandemic—have eluded traditional public health tools and frameworks. As a result, public health leaders focus more and more on the intersection between the environment and human health. Searching for a better framework to understand emerging threats to human health, many in public health circles have […]
  • Report: With increasing popularity of e-bikes and e-scooters, there's a need for 'safe and connected infrastructure'
    Electric scooters and e-bikes are rising in popularity. As transportation options diversify, local policymakers are beginning to integrate micromobility means as integral fixtures in transportation networks and climate action plans, given their health and climate benefits. But along with solutions, they’re also bringing with them a slew of hurdles. A report out of Oregon highlights […]

Leave a comment Cancel reply

-or-

Log in with your American City and County account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • hybrid technology
    Governments using technology to harness data and improve decision-making
  • Amid tech labor shortage, outsourcing digital services could provide relief
  • procurement IT
    The beauty of the beast: Why the pandemic & cybersecurity might actually improve procurement and IT collaboration
  • Report: City and county administrators are prioritizing their cyber defenses

White papers


Modernizing government services for today’s resident expectations

24th January 2023

Preparing Your Community Now for the Next Generation of Older Adults

18th October 2022

Helping Government Fleets Achieve Their Goals

30th September 2022
view all

Webinars


How To: Evaluate Digital Government Service Delivery Technologies

23rd January 2023

Using Technology to Enhance Communications

29th November 2022

Learn the benefits of transforming and automating your Contract Management process

4th November 2022
view all

PODCAST


Young Leaders Episode 4 – Cyril Jefferson – City Councilman, High Point, North Carolina

13th October 2020

Young Leaders Episode 3 – Shannon Hardin – City Council President, Columbus, Ohio

27th July 2020

Young Leaders Episode 2 – Christian Williams – Development Services Planner, Goodyear, Ariz.

1st July 2020
view all

GALLERIES


These 10 American cities are well prepared for a tech-based future

1st February 2023

Report: While remote work is causing offices to empty out, walkable cities are still in high demand

26th January 2023

10 American cities with a great downtown

24th January 2023
view all

Twitter


AmerCityCounty

Amid spike, federal transportation department launches initiative to curb traffic-related deaths dlvr.it/Shvs31

3rd February 2023
AmerCityCounty

Engaging businesses to strengthen your community dlvr.it/ShvZn0

3rd February 2023
AmerCityCounty

Report: Some public employees face financial hardship; comprehensive pay packages proved ‘a pathway toward economic… twitter.com/i/web/status/1…

2nd February 2023
AmerCityCounty

Strategic Budgeting for Modern Government dlvr.it/ShrHmD

2nd February 2023
AmerCityCounty

These 10 American cities are well prepared for a tech-based future dlvr.it/Shp7sH

1st February 2023
AmerCityCounty

How public health can build a “one health” infrastructure for the future dlvr.it/ShnlKm

1st February 2023
AmerCityCounty

Four Steps to Better Municipal Fleet Fuel Purchasing dlvr.it/ShnbWP

1st February 2023
AmerCityCounty

Report: With increase popularity of e-bikes and e-scooters, there’s a need for ‘safe and connected infrastructure’ dlvr.it/ShlKmJ

31st January 2023

Newsletters

Sign up for American City & County’s newsletters to receive regular news and information updates about local governments.

Resale Insights Dashboard

The Resale Insights Dashboard provides model-level data for the entire used equipment market to help you save time and money.

Municipal Cost Index

Updated monthly since 1978, our exclusive Municipal Cost Index shows the effects of inflation on the cost of providing municipal services

Media Kit and Advertising

Want to reach our digital audience? Learn more here.

DISCOVER MORE FROM INFORMA TECH

  • IWCE’s Urgent Communications
  • IWCE Expo

WORKING WITH US

  • About Us
  • Contact Us

FOLLOW American City and County ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2023 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.