New York State Deploys Millions to Secure Water Treatment Facilities
New York state is channeling millions of dollars into drinking water and wastewater treatment facilities to upgrade cybersecurity defenses following a wave of cyberattacks targeting more than 100 public water systems across 12 U.S. states over the summer. Federal and state investments are helping plants overhaul operational technology networks that manage critical municipal resources.
Shorement Plant Serves 800,000 Western New Yorkers Under Tight Digital Guard
The Monroe County Water Authority’s Shorement treatment plant in Greece, New York, delivers clean drinking water to 800,000 residents, processing up to 140 million gallons daily. Ken Naugle, the plant’s production engineer and water quality laboratory manager, stated that customers expect safe and reliable water at any time. Justin Moore, MCWA’s director of information technology, noted that keeping up with evolving threats and maintaining supported technologies remain primary challenges for the authority.
State Regulators Enforce Mandatory Incident Reporting and Multi-Factor Authentication
Governor Kathy Hochul introduced new cybersecurity regulations for drinking water and wastewater systems earlier this year. The mandates require mandatory cybersecurity training for operators, implementation of multi-factor authentication, complex passwords, and official reporting of security incidents to the state. According to public records from the New York State Department of Environmental Conservation, zero cyber attack incidents have been reported at state water systems since these reporting rules took effect at the end of March.
Cybersecurity Experts Warn of Vulnerabilities in Small and Rural Facilities
Matthew Wright, professor and chair of cybersecurity at the Rochester Institute of Technology, demonstrated real-time global cyber threats inside RIT’s Cyber Range. Wright noted that while coordinated attacks are typically orchestrated by a state or a government during conflicts, smaller rural facilities face severe risks due to outdated equipment, constrained budgets, and limited IT staff.
Worth a look