“In the absence of the EPA rules, the water sector continues to have no binding cybersecurity rules.”
The White House tells governors that “disabling” attacks are hitting water systems across the country. More than 150,000 utilities have no binding security rules because the EPA backed off its mandate last year under legal challenge. Iran-linked hackers got into Unitronics devices because nobody changed the default password. The federal response is a letter, a meeting and a task force.