Security Industry Association Issues Statement on Recent Cyberattacks to Water Facilities 

SILVER SPRING, Md.—In late July 2026, cyberattacks hit water and wastewater utilities across at least a dozen U.S. states. These incidents offer a clear reminder that the security of critical infrastructure cannot be divided neatly into physical and cyber silos. When digital systems fail, the physical infrastructure and the people responsible for operating and protecting it become the last lines of defense. 

“The threats to water facilities are not new, yet they require a renewed and broad commitment by our industry to work with this essential sector to enhance preparedness strategies,” said Don Erickson, CEO of the Security Industry Association (SIA). “SIA is developing plans to expand our OT–physical security resources into practical advice for water utilities.”  

The SIA Utilities Advisory Board (UAB) and Cybersecurity Advisory Board are working to help utilities prepare for this increasingly interconnected threat environment through new content and recommended practices, with a goal to help the people operating critical infrastructure enhance the security and resilience through the practical and effective use of physical security and cybersecurity technologies. 

Specific actions planned by SIA include: 

• Convening the Protecting Utilities Lunch at ISC East 2026.This program, developed by the SIA Utilities Advisory Board, will explore the evolving threat environment facing water utilities, the complexities of securing connected IT/operational technology environments and practical approaches for coordinating physical security and IT/OT teams during an incident.  

• Additional programming at ISC East will address related topics such as zero trust, cybersecurity and artificial intelligence and converged threats. Beyond ISC East, the UAB will launch a survey to capture the current state of utility security programs and establish a sector-wide picture of physical security infrastructure. Insights gathered from both the survey and industry discussions will be compiled into a white paper designed to provide actionable guidance for the professionals responsible for protecting and operating water infrastructure every day. 

SIA also recognizes that long-term resilience requires more than awareness. We support the efforts of stakeholder organizations in the water infrastructure sector to advocate for increased investment in water infrastructure development and security capacity building for utilities. SIA believes infrastructure resilience must encompass both cybersecurity and physical security, as well as the people, processes and technologies that keep essential services operating. 

An Invitation, Not Just a Statement 

If you’re a security practitioner at a utility, an integrator who serves the water or energy sector or a firm developing and delivering physical and cyber security solution, this is the conversation we’re having, and we want your voice in it. Share your feedback with us, join a practitioner interview or join us in New York City for SIA’s Protecting Utilities luncheon at ISC East.  

For more information or to become involved in these initiatives, please contact Courtney Kay at ckay@securityindustry.org.  

About SIA

SIA is the leading trade association for global security solution providers, with over 1,700 innovative member companies representing thousands of security leaders and experts who shape the future of the security industry. SIA protects and advances its members’ interests by advocating pro-industry policies and legislation at the federal and state levels, creating open industry standards that enable integration, advancing industry professionalism through education and training, opening global market opportunities and collaborating with other like-minded organizations. As the premier sponsor of ISC Events expos and conferences, SIA ensures its members have access to top-level buyers and influencers, as well as unparalleled learning and network opportunities. SIA also enhances the position of its members in the security marketplace through SIA GovSummit, which brings together private industry with government decision-makers, and Securing New Ground, the security industry’s top executive conference for peer-to-peer networking.