American Water hit by cyberattack, takes some systems offline

Red padlock open on electric circuits network dark red background
(Image credit: Shutterstock/Chor muang)

American Water Works Company, the largest public water and wastewater utility company in the United States, has confirmed suffering a cyberattack which forced it to shut down parts of its infrastructure.

In an 8-K form filed with the US Securities and Exchange Commission (SEC), the company said it detected, “unauthorized activity within its computer networks and systems” on October 3 2024.

It determined this activity was a “cybersecurity incident” which triggered its incident response protocols, resulting in the company bringing in third-party cybersecurity experts to investigate, notifying the appropriate law enforcement, and shutting some systems down to contain the damage.

Ransomware or no ransomware

“The Company has taken and will continue to take steps to protect its systems and data, including disconnecting or deactivating certain of its systems,” American Water Works said in the 8-K form, without specifying what was disconnected, or how long it plans to keep the systems offline.

The company noted none of its water or wastewater facilities or operations were negatively impacted by the incident, and that it doesn’t expect the attack to have a material impact, although this may change as the investigation is still ongoing.

Usually, when a company shuts down parts of its network, it’s due to a ransomware attack. However, American Water did not confirm it just yet: “In an effort to protect our customers’ data and to prevent any further harm to our environment, we disconnected or deactivated certain systems,” Ruben Rodriguez, a spokesperson for American Water, said in a statement.

“There will be no late charges for customers while these systems are unavailable,” Rodriguez concluded, without specifying the nature of the attack, adding, “our dedicated team of professionals are working around the clock to investigate the nature and scope of the incident."

American Water provides regulated and market-based drinking water, wastewater services, and related services to residential, commercial, and industrial customers. Its services are essential for millions of Americans, playing a vital role in public health and safety.

Via TechCrunch

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
sewage water treatment
Southern Water denies claims it offered $750,000 ransom to ransomware hackers
Red padlock open on electric circuits network dark red background
Newspaper printing across US hit after Lee Enterprises says “cybersecurity event” disrupted operations
ransomware avast
Engineering giant ENGlobal confirms hackers hit internal data
China
Volt Typhoon threat group had access to American utility networks for the best part of a year
Ransomware
Lee Enterprises blames cyberattack for encrypting critical systems as US newspaper outages drag on
ransomware avast
The biggest addiction treatment provider in the US says it was hit by data breach
Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
DeepSeek
Deepseek’s new AI is smarter, faster, cheaper, and a real rival to OpenAI's models
Open AI
OpenAI unveiled image generation for 4o – here's everything you need to know about the ChatGPT upgrade
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
An aerial view of an Instavolt Superhub for charging electric vehicles
Forget gas stations – EV charging Superhubs are using solar power to solve the most annoying thing about electric motoring