New Jersey Water Utilities Enhance Cybersecurity in Response to Recent Attacks

On August 5, 2026, New Jersey officials reported that two municipal water systems were targeted in cyberattacks, widely believed to be linked to state-sponsored actors, potentially Iran. While the attack has not been conclusively attributed to any single entity, the state suspects that Iranian tactics might have been imitated by other state actors. This scenario underscores the critical implications for water security and the operational capacities of utilities across the region.

During the cyber incidents, the affected utilities reverted to manual control operations after their automated systems were compromised. Despite these disruptions, officials confirmed that water service remained uninterrupted for customers, highlighting the critical importance of manual control capabilities during such cyber events. Both water systems promptly implemented strengthened access controls to minimize the risk of future incidents, demonstrating a proactive approach to cybersecurity vulnerabilities within the water sector.

The vulnerability that allowed for these cyber intrusions was associated with widely utilized utility software, which, fortunately, has had a fix released. Given the nature of the threat, all water utilities utilizing this software need to prioritize patching and ensuring that operational resilience measures are firmly in place. The challenges faced by the utilities show a heightened operational risk that could lead to broader implications not only for water service providers but also for the communities they serve.

As the situation develops, multiple agencies have mobilized to address the incidents, including the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC), the Federal Bureau of Investigation (FBI), and the Cybersecurity and Infrastructure Security Agency (CISA). Their collaboration emphasizes the importance of coordinated responses to cyber threats that could destabilize essential public services. Water sector contractors supporting these utilities have an opportunity to enhance their cybersecurity and continuity service offerings in response to the increasing demands for resilience in the face of evolving cyber threats.

The events in New Jersey resonate globally, as similar actions targeting water utilities across at least a dozen states indicate a growing trend in cyber warfare tactics. The most notable among these was the intrusion reported by Clayton County Water Authority and Columbus Water Works, both of which managed to avert significant disruptions despite detecting unauthorized access attempts. These incidents serve as a stark reminder of the continuous need for vigilance in the cybersecurity posture of public utility providers to protect the availability of safe drinking water.

Commercial and government entities must acknowledge the urgency of implementing robust cybersecurity frameworks that not only involve immediate response protocols but also long-term strategic plans. As evidenced by these incidents, the operational capabilities of utilities during cyberattacks are paramount to preventing widespread service disruptions. Future investments in cybersecurity technology and training programs for personnel operating these critical systems will be essential to mitigate similar risks going forward.

• Water utilities and contractors using the affected software should prioritize applying the available fix, reviewing exposure, and checking continuity plans, as described in the signal.
• The incidents show the operational importance of manual-control capabilities and access-control measures for maintaining water service during cyber incidents.
• NJCCIC, FBI, and CISA are among the relevant government cybersecurity entities identified in the signals.
• Water-sector contractors supporting utilities may find cybersecurity and continuity services directly relevant.
• Enhanced access controls were implemented by affected utilities to mitigate the risk of future incidents.
• No disruptions to drinking water service were reported, demonstrating the effectiveness of manual operations in emergencies.
• This incident is part of a broader trend of cyber vulnerabilities affecting water utilities across states.
• The collaboration among federal and state agencies spotlighted the need for comprehensive cybersecurity strategies.
• Utilities must prioritize training and resources to bolster their cybersecurity defenses amid evolving threats.