Senator Sheldon Whitehouse, Ranking Member of the U.S. Senate Environment and Public Works Committee (EPW), addressed cybersecurity threats to American water infrastructure during a committee hearing in Washington, D.C. The hearing, titled “Identifying and Addressing Cybersecurity Challenges to Protect America’s Water Infrastructure,” focused on vulnerabilities in the nation’s water systems.
Whitehouse began by thanking Chair Shelley Moore Capito for organizing the session and acknowledged the witnesses’ participation. He described cybercrime and cyberwarfare as ongoing challenges that have evolved over decades. Reflecting on his experience with the Intelligence Committee Cyber Task Force in 2010, Whitehouse noted some progress in information sharing between agencies like the EPA and the Cybersecurity and Infrastructure Security Agency, as well as increased public awareness from non-profits and trade groups. However, he said these efforts are not enough.
He highlighted persistent threats from state-sponsored actors linked to Russia, China, Iran, and North Korea. These groups have targeted American facilities by stealing sensitive data, disrupting networks, demanding ransoms, and affecting sectors such as health care and drinking water.
The United States has nearly 170,000 water systems that are becoming more vulnerable as they modernize with new technology. According to Whitehouse, many facilities have already experienced digital breaches but a lack of incident reporting makes it difficult to assess the full scope of risk.
Since 2023, hackers from Russia, Iran, and China have attacked small municipal water systems in Texas, Pennsylvania, and Massachusetts. Rhode Island municipal facilities have reported at least six cyberattacks over six years resulting in significant financial losses.
“All water utilities without adequate cyber security are at risk, regardless of size,” Whitehouse stated. He added that while no major service disruptions have occurred so far due to these attacks on water utilities, each incident results in lost time and money. He warned that incapacitating even one facility could cause widespread fear.
Citing an EPA survey showing less than 25 percent of water utilities conduct annual cyber risk assessments, Whitehouse stressed national unpreparedness for a coordinated attack.
He criticized previous federal actions: “The Trump administration has forced out thousands of federal cybersecurity experts, cut funding to research and readiness programs, and crippled our relationships with key international intelligence partners.” He called for strengthening national cybersecurity capabilities through better knowledge-sharing among utilities.
Whitehouse also pointed out that updating cybersecurity is often postponed because utilities prioritize maintaining service levels for ratepayers over system upgrades. He emphasized the need to repair outdated infrastructure while improving cybersecurity measures simultaneously.
He referenced recent federal investment: “To start addressing our nation’s massive water infrastructure investment deficit, the Infrastructure Investment and Jobs Act provided more than $50 billion with some expanded eligibility for cybersecurity projects.”
“This was a good start but it was not nearly enough,” he said. Whitehouse expressed interest in expanding EPA authority through committee action to help update both physical and digital infrastructure nationwide.
The Senate Environment and Public Works Committee operates from its base in the Senate Dirksen Office Building to support hearings like this one (https://www.epw.senate.gov/public/). The committee oversees federal programs related to environmental quality—such as clean air initiatives—and infrastructure across the country (https://www.epw.senate.gov/public/). It influences policy on regulations impacting wildlife protection as well as maintenance of critical resources including transportation networks (https://www.epw.senate.gov/public/). Subcommittees address topics such as clean air standards or transportation improvements (https://www.epw.senate.gov/public/).
Shelley Moore Capito chairs the EPW Committee alongside members including Kevin Cramer and Cynthia Lummis (https://www.epw.senate.gov/public/).
