Cyber-attacks are a serious threat to the public drinking water supply. Recent cyber-attacks around the United States have resulted in community water supplies being poisoned or their suppliers’ business operations being held hostage by ransomware. In recognition of this critical threat, the 2021-2022 Ventura County Grand Jury investigated the cybersecurity of Ventura County public water providers.
The Grand Jury investigated two primary areas of cyber vulnerability in the water sector: the information technology used to bill consumers and record usage, and the operational technology used to control and monitor treatment and delivery of the water supply. Malicious actors can take advantage of network vulnerabilities and/or weak user access controls in either information or operational technology to disrupt the business and the water service, and potentially degrade public safety.