In this episode Talking Under Water the co-hosts discuss the recent coordinated cyberattacks targeting water and wastewater system PLCs across Minnesota and several other states, examining what happened, why it matters, and what utilities can learn from the incident. Bob Crossen and Alex Cossin break down reports that more than 30 Minnesota water systems were affected, with federal agencies now investigating activity across multiple states. The conversation explores how attackers targeted operational technology that helps run critical infrastructure such as pumps, wells, water towers, lift stations, and automated controls.

The hosts emphasize the most important takeaway from the attacks: despite operational disruptions, utilities successfully maintained safe drinking water by switching to manual operations. They discuss the growing importance of resilience as the industry adopts more digital tools, automation, and artificial intelligence, while highlighting the need to preserve operator expertise and manual control capabilities.

The episode also examines challenges facing smaller utilities, including limited staffing, funding constraints, and cybersecurity resources. Crossen and Cossin review guidance from agencies such as the FBI, CISA and EPA, including recommendations related to passwords, remote access, network segmentation, and operational technology security. They conclude by discussing ongoing questions surrounding the attacks, the role of manufacturers and communication during cybersecurity incidents, and the importance of supporting operators who helped maintain reliable service throughout the event.

Show notes

Connect your PLCs to the Internet: What could possibly go wrong?

Cyber resilience and investment strategy in the water sector

This federal agency scans water system cyber-vulnerabilities for free

What recent cyberattacks reveal about securing water utility OT

What is operational technology (OT)?

Timestamps

00:00 – Introduction

00:44 – One of the largest coordinated cyberattacks on U.S. water systems unfolds

03:40 – Utilities switch to manual operations and keep water safe

04:42 – What the attacks reveal about workforce resilience and AI dependence

08:53 – Why manual controls remain critical for protecting water systems

12:39 – Federal guidance on cybersecurity, passwords, and system protections

16:56 – Who may be behind the attacks and what questions remain unanswered

25:06 – Housekeeping

About the Podcast    

Talking Under Water is the premier podcast for the water industry, including municipal water and wastewater, residential water treatment, storm water management and erosion control. It is produced in coordination between Wastewater Digest (WWD), WaterWorld and Stormwater Solutions (SWS). The podcast covers topics under the One Water movement including the municipal and industrial water and wastewater, residential, stormwater and erosion control markets. Talking Under Water highlights news, trends, new technologies, industry discussions and interviews with experts across the municipal water industry. New episodes of the podcast are released every other week. Logo Images: Anatoly Tiplyashin / Romolo Tavani / stock.adobe.com.    

Contact the Talking Under Water podcast editors by emailing [email protected] engaging with them on X @TUWpodcast. Join the conversation by commenting or using the hashtag #talkingunderwaterpod on social media.