Cyberattacks on water systems are rising nationwide, with hackers targeting treatment plants and industrial controllers in more than a dozen states. Erie Water Works says it is closely monitoring those threats and has already taken steps to keep the local water system protected.
Across the country, hackers have gained access to water utilities by finding industrial controllers connected to the public internet, sometimes guessing passwords or exploiting outdated equipment.
Erie Water Works says its system is built differently.
“The manner in which these systems have been hacked was totally preventable, and something we have already prevented. Our control systems aren’t connected to the public internet, and that’s where some of these utilities fell short,” said Craig Palmer, CEO of Erie Water Works.
The utility has removed older controllers known to be vulnerable and says it has been preparing for the rise in cyber activity for years, especially as attacks become more sophisticated with the use of AI-driven hacking tools.
Erie Water Works also works directly with federal agencies to stay ahead of emerging threats. If automation is ever disrupted, the utility can switch to manual operations, helping maintain water pressure and service for homes, businesses, hospitals, and schools.
“We work with Homeland Security and CISA. They tell us what’s coming, and we stay one step ahead. Protecting our infrastructure has become daily work, and the cyber end of it has only increased with the advantage of AI,” Palmer said.
While Erie Water Works cannot disclose every layer of its cybersecurity protections, officials say their networks are isolated and reinforced through employee training, firewalls, password protection, and multi-factor authentication.
As cyber threats continue to grow nationwide, Erie Water Works says it wants customers to feel confident in the safety and reliability of the system. Officials say cybersecurity and water quality remain top priorities.
The utility also emphasized that protecting the community is a shared responsibility and said it remains committed to safeguarding critical infrastructure every day of the year.