Cybercrime, cybersecurity and water utilities

ABSTRACT A total of 20 known cases of cybercrime attacks on water utilities have been seen in five countries between 2000 and 2021, with a steady increase in their frequency. The actual number of cyberattacks is higher, with 40 recorded in the United States in 2014–15. It is chiefly driven by organized crime and hostile state actors, along with disgruntled former employees. Vulnerabilities occur because of utilities adopting supervisory control and data acquisition (SCADA) systems without appropriate cybersecurity measures along with staff who have properly trained to be aware of phishing attacks. Threats such as these highlight the need for water utilities to have a comprehensive risk management system in operation.