Skip to content

HARRISBURG, PA – On Thursday, October 3, 2024, American Water learned of “unauthorized activity” carried out against its computer systems and networks. The company, which has been in business since 1886, supplies water to over 14 million people across 14 states. Like other utility companies, American Water faces pressure – from regulators, increased demand, outdated technologies, and cyberattacks – to update and modernize its infrastructure.

For example, the US power grid, much of which dates back to the 1950s, will require billions of dollars in investments over the coming years. The cost of not upgrading – in power outages and lost business – would likely be even higher, according to the Department of Energy.

Water utility companies likewise face the dual challenges of cyber threats and stronger regulatory requirements. For example, the Pennsylvania Public Utility Commission emphasized the need for robust cybersecurity practices among water utilities following the 2023 cyberattack on the Municipal Water Authority of Aliquippa. The attack targeted operational technology and demonstrated the vulnerability of critical water infrastructure.

The cyberattack on American Water is the latest example of that vulnerability.

According to a company FAQ regarding the American Water hack, the company disconnected some of its systems to protect customer data from further compromise. As of October 10, its payment portal, MyWater, was back online and billing processes had resumed.

Harrisburg University’s Dr. Bruce Young, Program Lead and Instructor of Cybersecurity & Information Assurance Graduate Studies, joined FOX43 hosts Evan Forrester and Alyssa Kratz to shed some light on the incident and let viewers know what’s at stake.

“Attacks on critical infrastructure are starting to become more common,” said Dr. Young. “It’s not a threat to the water supply; it’s a threat more to your personal account information regarding billing and so forth. Find out: what information is out there on the internet that I might not be aware of?”

FOX43 host Alyssa Kratz closed with another call to awareness about our individual “digital footprints.”

“Be vigilant. Watch your credit. If you receive any kind of communication from American Water or any other company that could have your personal information, make sure you’re calling the company and confirming they really sent it and that it’s not a scam.”

You can watch the entire segment at FOX43.

In 2024, Harrisburg University of Science and Technology (HU) was named a Center for Academic Excellence in Cyber Defense (CAE-CD) by the National Security Agency (NSA).

And did you know that October is Cybersecurity Awareness Month across the country? Are you wondering how to make your mark on this critical field? Be sure to visit HarrisburgU.edu to learn about Harrisburg University’s Bachelor and Master of Science in Cybersecurity Operations and Control Management degree programs, as well as its Master of Science in Computer Information Sciences degree program, which served as the NSA’s validated program of study for the CAE-CD designation.

ABOUT HARRISBURG UNIVERSITY

Harrisburg University is accredited by the Middle States Commission on Higher Education and is a private, nonprofit university offering bachelor’s and graduate degree programs in the fields of science, technology, and mathematics. For additional information about the University’s affordable, demand-driven undergraduate and graduate programs, please call 717.901.5146 or email Connect@HarrisburgU.edu. Stay updated by following Harrisburg University on XLinkedInInstagram, and Facebook.