{"id":314701,"date":"2026-08-05T22:32:08","date_gmt":"2026-08-05T22:32:08","guid":{"rendered":"https:\/\/www.newsbeep.com\/us-ny\/314701\/"},"modified":"2026-08-05T22:32:08","modified_gmt":"2026-08-05T22:32:08","slug":"new-york-boosts-funding-for-water-cybersecurity-grants","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us-ny\/314701\/","title":{"rendered":"New York boosts funding for water cybersecurity grants"},"content":{"rendered":"

Reminding everyone that not all of the nation\u2019s water infrastructure will be so readily disrupted by cyberattack, New York Gov. Kathy Hochul this week announced more than $9 million in grants to improve the cybersecurity of dozens of water systems across the state.<\/p>\n

One hundred and fifty-three local government projects are set to receive funding through Strengthening Essential Cybersecurity for Utilities and Resiliency Enhancements, or SECURE, a grant program created to support new cybersecurity standards<\/a> governing the state\u2019s water and wastewater utilities. The program includes grants of $50,000 for cybersecurity assessments and $100,000 for implementing cybersecurity upgrades.<\/p>\n

The regulations hold that facilities must implement common cybersecurity controls, such as limiting users\u2019 access to only systems they need, prohibiting the use of default credentials and requiring complex passwords and multifactor authentication. Larger treatment plants, those processing at least 10 million gallons of water per day, are required to begin monitoring and logging network activity. And treatment plant operators will be required to complete cybersecurity training, every five years, to renew their certifications (though the regulations offer assurance that their total training hours will not increase). When officials unveiled the new cybersecurity regulations for New York water utilities in March, Colin Ahern, the state\u2019s former cyber director, who recently became<\/a> New York\u2019s first director of security and intelligence, said the new rules would move the state \u201cbeyond reactive defense.\u201d<\/p>\n

In at least two press releases, New York officials have said the SECURE program would offer just $2.5 million in grants, an amount that fell short of funding all of the water utilities that had expressed interest. The governor\u2019s office did not immediately respond to an email asking why funding had been increased to $9 million, but in a press release Monday, Hochul said the recent wave of cyberattacks against water utilities, which have now reportedly been detected in at least 12 states<\/a>, demonstrate that risks to the nation\u2019s water infrastructure are \u201creal and escalating.\u201d<\/p>\n

This publication reported last Tuesday that more than 30 communities<\/a> in Minnesota saw their water utilities briefly disrupted by the coordinated cyberattack. The federal government soon after announced that seven additional states had been targeted, possibly by Iran. And news outlets this week have raised the total number of affected states to 12, a list that also includes Georgia, Michigan and South Dakota.<\/p>\n

Notwithstanding the president\u2019s confusing suggestion<\/a> that Minnesota is somehow to blame for the cyberattacks, Iran has, for most analysts, remained the most likely perpetrator. Cynthia Kaiser, a former deputy director of the FBI\u2019s Cyber Division, said that although the recent attacks haven\u2019t been formerly attributed to any particular party, it\u2019s \u201cmore than a guess\u201d that Iran is responsible, based on its habit in recent years of targeting the United States\u2019 water infrastructure.<\/p>\n

Kaiser, now a senior vice president at the cybersecurity firm Halcyon, said the extent to which New York has developed its cybersecurity policies is \u201ccommendable\u201d \u2014 \u201cthey\u2019ve taken it really seriously and I think that\u2019s a great sign and example for a lot of other states.\u201d The available tax bases and varying appetites for new regulations, versus enticements, she said, will influence how other states approach the challenge of shoring up the water sector\u2019s security, but all states \u201cneed to focus on ensuring that their water sector is hardened and shored up.\u201d<\/p>\n

Mauricio Papa, a computer science professor at the University of Tulsa, said in a recent interview<\/a> that water lags behind other sectors, such as energy, on cybersecurity. Kaiser partially attributed the absence of standards to the lack of funding and technical staff available to municipally run facilities. And though Iran consistently exaggerates the outcomes of its cyberattacks \u2014 \u201cIran lies about its impact constantly,\u201d Kaiser said \u2014 she recommended utilities take several remedial steps that don\u2019t require a ton of technical know-how, such as disconnecting devices from the internet, changing default passwords and creating inventories of digital devices.<\/p>\n

The recent rash of cyberattacks has received widespread news coverage, a fact that might be attributed to its connection to the United States\u2019 war in Iran and the attacks\u2019 broad geographical scope. But there are plenty of cyberattacks against water utilities that have gone under-reported or weren\u2019t reported at all. And there\u2019s no guarantee their impact to the public will remain so negligible\u00a0 \u2014 \u201cIt\u2019s death by 1,000 cuts,\u201d Kaiser said.<\/p>\n

\t\t\t\t\t\"Colin<\/p>\n

\n\t\t\tWritten by Colin Wood
\n\t\t\tColin Wood is StateScoop’s editor in chief. Contact him at colin.wood@statescoop.com or cwood.64 on Signal.\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"Reminding everyone that not all of the nation\u2019s water infrastructure will be so readily disrupted by cyberattack, New…\n","protected":false},"author":2,"featured_media":314702,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[118803,118804,5064,118805,426,9,11,10,49,51,50,118806],"class_list":["post-314701","post","type-post","status-publish","format-standard","has-post-thumbnail","category-new-york","tag-cyberattacks","tag-cyebrsecurity","tag-government-technology","tag-grant-funding","tag-kathy-hochul","tag-new-york","tag-new-york-headlines","tag-new-york-news","tag-new-york-state","tag-new-york-state-headlines","tag-new-york-state-news","tag-water-utilities"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/posts\/314701","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/comments?post=314701"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/posts\/314701\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/media\/314702"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/media?parent=314701"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/categories?post=314701"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/tags?post=314701"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}