PENNSYLVANIA, USA — American Water, the largest regulated water utility company in the U.S., has become the latest victim of a cyberattack.
The company made the announcement Monday, alerting its more than 14 million customers.
It became aware of unauthorized activity in its computer networks and systems on Thursday, Oct. 3. The company says it immediately took proactive steps and disconnected or deactivated certain systems.
“Attacks on critical infrastructure are starting to become more common," said Dr. Bruce Young, director of Harrisburg University's Cybersecurity Studies graduate program.
Earlier this year, the White House and the EPA sent a joint letter to U.S. governors, asking for their help “to secure water systems against the increasing risks from and consequences of these attacks.”
American Water does not believe its facilities or operations were impacted by the attack.
Dr. Young says this incident is more about personal data.
“It’s not a threat to a water supply, it’s more a threat to your personal information and account, regarding billing and so forth," he explained.
With so many companies falling victim to cyberattacks which can potentially compromise personal information, Dr. Young encourages everyone to do their own research.
“Finding out what information is out there on the internet that I may not be aware of," he said.
American Water is pausing billing as it continues to investigate the nature of the attack. Customers will not be charged any late fees as long as systems remain unavailable.
You can read a full FAQ from American Water here.