0:49STOCK PHOTO/Getty Images
In November 2023, hackers affiliated with the Iranian government breached the Municipal Water Authority of Aliquippa in Pennsylvania.
This incident highlighted the susceptibility of medium to small municipal water systems to cyberattacks.
Currently, a group of “white-hat” hackers has stepped up to assist in safeguarding these systems.
"We have recognized both the pressing nature of the threat and the possibility of a community-oriented solution," stated Jake Braun, co-founder of the DEF CON hacker convention for security specialists and Executive Director at the University of Chicago’s Cyber Policy Initiative, in an initial interview with ABC News.
"This next phase unites leading experts from DEF CON, academia, industry, and philanthropy to offer assistance tailored to the distinct challenges faced by the water sector."
Experts warn that an assault on a water utility could result in catastrophic outcomes, ranging from loss of water supply to causing chemical imbalances that could endanger public health.
The initiative aims to provide “hacker-volunteers” to water utilities to bolster their cybersecurity measures. These volunteers are ethical hackers who assess vulnerabilities to enhance the cybersecurity framework.
"This effort goes beyond merely securing networks," Braun noted. "It’s about safeguarding drinking water, public health, and national resilience."
STOCK PHOTO/Getty Images
Franklin, which is providing the personnel for the initiative, is collaborating with the National Rural Water Association (NRWA), Cyber Resilience Corps, Aspen Digital, the American Water Works Association, and UnDisruptable27
"When individuals envision cyberattacks, they often think of large cities and critical infrastructure. However, the reality is that the water system in a locality like Rensselaer, Indiana is equally susceptible — and frequently much less shielded," stated Matt Holmes, CEO of the National Rural Water Association. "That’s why this collaboration is significant. DEF CON Franklin is delivering top-tier cybersecurity knowledge to the communities that require it the most. For smaller municipalities, this isn’t just a matter of innovation — it’s about survival."
The program has already dispatched teams to Indiana, Oregon, Utah, and Vermont, providing complimentary support on network mapping, password policies, and OT evaluations.
The announcement was made at DEF CON 2025 in Las Vegas, with plans for additional deployments in the future. DEF CON is an annual event held in Las Vegas that gathers cybersecurity professionals from across the globe to exchange ideas about the field.
Sourse: abcnews.go.com
