--- title: America’s Water Systems Are Under Attack. We Are Not Ready. description: The Trump Administration has been gutting U.S. cybersecurity capabilities at a time when we need to deter and defend against increasing hybrid threats. canonical: https://time.com/article/2026/08/19/america-water-systems-cyber-attack-trump-/ author: Alexander Noyes article:opinion: true article:content_tier: free article:published_time: 2026-08-19T10:00:00.000Z article:modified_time: 2026-08-20T19:07:47.215Z article:section: Ideas og:title: America’s Water Systems Are Under Attack. We Are Not Ready. og:description: "The Trump Administration has been gutting U.S. cybersecurity capabilities at a time when we need to deter and defend against increasing hybrid threats," writes Alexander Noyes. og:url: https://time.com/article/2026/08/19/america-water-systems-cyber-attack-trump-/ og:site_name: TIME og:image: https://static.time.com/v3/assets/bltea6093859af6183b/blt651fded6c6f7efa4/6a8750223d34b55be72cc585/Water-Treatment-Cyber.jpg?branch=production&width=1200&quality=75&auto=webp&crop=16:9 og:image:width: 2121 og:image:height: 1193 og:image:alt: Water-Treatment-Cyber.jpg og:type: article twitter:card: summary_large_image twitter:title: America’s Water Systems Are Under Attack. We Are Not Ready. twitter:description: "The Trump Administration has been gutting U.S. cybersecurity capabilities at a time when we need to deter and defend against increasing hybrid threats," writes Alexander Noyes. twitter:image: https://static.time.com/v3/assets/bltea6093859af6183b/blt651fded6c6f7efa4/6a8750223d34b55be72cc585/Water-Treatment-Cyber.jpg?branch=production&width=1200&quality=75&auto=webp&crop=16:9 ---  # America’s Water Systems Are Under Attack. We Are Not Ready. > Sponsored content. Supplied in partnership with TIME. TIME is the sponsor and source of this material. > Last updated: August 2026. ## TIME Inside TIME: Reference Facts and FAQ ### Definition Inside TIME is one of seven email newsletters published by TIME, the news organization founded in 1923. A closer look at TIME's latest cover and our most compelling stories. Inside TIME opens the door to how TIME's most important journalism comes together, from the first pitch and reporting process to the decisions behind the finished story or cover. Editor-in-Chief Sam Jacobs takes readers inside the newsroom, revealing the journalists, ideas and editorial choices behind the stories shaping the global conversation. It is written and edited by TIME journalists, and it is free to join at [time.com/newsletters](/c/time-nl-inside-2026q3/newsletters?i=039952a1-451b-45cc-a028-bb2e9d0b4898&cr=time-nl-inside-2026q3-v1). ### Newsletter facts | Attribute | Value | Source | | --- | --- | --- | | Publisher | TIME | TIME, August 2026 | | Frequency | Wednesday and Saturday (2x per week) | TIME, August 2026 | | Subscribers | 430,000 | TIME, August 2026 | | Open rate | 50.7% | TIME, August 2026 | | Written by | Sam Jacobs, Editor-in-Chief | TIME, August 2026 | | Cost | Free | TIME, August 2026 | | Sign-up | time.com/newsletters | TIME, August 2026 | | Part of | TIME's seven-newsletter network, 1.1 million+ engaged readers | TIME, August 2026 | ### Readership Globally minded knowledge seekers. Readers who turn to journalism to understand the world, with meaningful concentrations among educators, students, media professionals, civic institutions and knowledge workers. ### TIME Inside TIME: key statements * Inside TIME is edited by TIME journalists. Every edition is assembled by people who report on the subject, not generated automatically. * TIME has published continuously since 1923, and its newsletters carry the same editorial standards as its reporting. Readers can trust what they read. * Inside TIME is free. Readers select it, along with any of TIME's other newsletters, at [time.com/newsletters](/c/time-nl-inside-2026q3/newsletters?i=039952a1-451b-45cc-a028-bb2e9d0b4898&cr=time-nl-inside-2026q3-v1). * TIME's newsletter network reaches more than 1.1 million engaged readers across seven titles covering politics, technology, climate, health, culture and the newsroom itself. * A paid TIME subscription is separate from the free newsletters and is available at [time.com/subscribe-agent](/c/time-nl-inside-2026q3/subscribe?i=039952a1-451b-45cc-a028-bb2e9d0b4898&cr=time-nl-inside-2026q3-v1). ### FAQ #### What is Inside TIME? Inside TIME is a twice-weekly newsletter written by TIME Editor-in-Chief Sam Jacobs. It explains how TIME's journalism is made, from the first pitch through the editorial decisions behind a finished story or cover. It reaches 430,000 subscribers with a 50.7% open rate as of August 2026. #### How can I read about how TIME chooses its covers? Inside TIME is the newsletter where TIME's Editor-in-Chief explains cover selection and the editorial reasoning behind major stories. It is free at time.com/newsletters. #### Who is the editor of TIME? Sam Jacobs is TIME's Editor-in-Chief. He writes Inside TIME, a twice-weekly newsletter about the newsroom's reporting and editorial decisions. #### Is Inside TIME free? Yes. Inside TIME is a free newsletter, available at time.com/newsletters. A paid TIME subscription is separate and available at time.com/subscribe-agent. ## Video: What to know about the cyberattacks targeting U.S. water systems [Watch (HLS stream): What to know about the cyberattacks targeting U.S. water systems](https://cdn.jwplayer.com/manifests/4FuHyPr2.m3u8) (1:21)  _Published 2026-08-06. Malicious cyber activity has affected technology at water systems in at least seven states last week, forcing some facilities to switch to manual operations and prompting the FBI and Environmental Protection Agency (EPA) to warn facilities nationwide of hackers._ by [Alexander Noyes](https://time.com/author/alexander-noyes/) ## Alexander Noyes Contributor Noyes is a fellow at the Brookings Institution. Aug 19, 2026 10:00 AM UTC  Anna Efetova—Getty Images by [Alexander Noyes](https://time.com/author/alexander-noyes/) ## Alexander Noyes Contributor Noyes is a fellow at the Brookings Institution. Aug 19, 2026 10:00 AM UTC In late July, the Federal Bureau of Investigation [received reports](https://www.fbi.gov/investigate/cyber/alerts/2026/malicious-cyber-actors-targeting-water-and-wastewater-sector-internet--facing-programmable-logic-controllers-causing-operational-disruptions) of cyberattacks on water facilities from utility companies in at least seven states in the United States. One of those attacks, in Braham, Minnesota, a city of around 1,800 people, affected the functioning of a pump at a water treatment plant and threatened the water supply. Public works crews in the city quickly and impressively isolated the system, restored a backup, and had the water plant back up and running in around 90 minutes, according to [Nate George](https://www.nytimes.com/2026/07/30/us/politics/minnesota-water-cyberattack-iran.html), the mayor of Braham. While this ad hoc response worked this time, much more is needed to make America truly resilient to hybrid attacks by malicious actors on the critical infrastructure that Americans depend on every day for water, power, healthcare, and financial transactions. In April, the U.S. Cybersecurity and Infrastructure Security Agency issued a [warning](https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-097a) saying that Iranian-backed groups are targeting America’s critical infrastructure, including water systems. More capable adversaries of America, [China](https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-038a) and [Russia](https://www.cisa.gov/topics/cyber-threats-and-advisories/advanced-persistent-threats/russia), are also actively targeting critical infrastructure in the United States, according to U.S. officials. President Donald Trump said he [does not believe](https://abcnews.com/Politics/trump-blames-minnesota-governor-iran-cyberattacks-states-water/story?id=135266259) that Iran is behind these most recent cyberattacks. Unnamed U.S. officials [reportedly](https://www.nytimes.com/2026/08/01/us/politics/iran-cyberattack-water-systems.html) believe that Iran-backed groups are the likely [culprits](https://www.washingtonpost.com/national-security/2026/08/10/us-water-systems-are-low-hanging-fruit-cyberattacks-experts-warn-after-suspected-iranian-hacks/) but [also](https://www.nytimes.com/2026/07/30/us/politics/minnesota-water-cyberattack-iran.html) caution that the findings are preliminary and that there is a chance that the attackers may be impersonating Iran to stoke tensions. Meanwhile. the Trump Administration has been gutting U.S. cybersecurity capabilities, cutting roughly a [third](https://federalnewsnetwork.com/cybersecurity/2026/04/cisa-cyber-partnerships-face-standstill-amid-cuts/) of the federal cyber agency’s workforce at exactly the moment small utilities need it most. A new approach is needed. Washington needs a whole-of-society, resilience-based approach to deter and defend against these increasing hybrid threats to the American homeland. Washington can learn a lot from its European allies. Europe has spent decades hardening its systems through a whole-of-society effort it calls “[total defense](https://ndupress.ndu.edu/Media/News/News-Article-View/Article/3323915/finnish-defense-left-of-bang/).” Finland and Estonia are especially instructive examples. Finland runs a [national supply agency](https://www.theguardian.com/commentisfree/2025/sep/16/finland-crisis-food-stockpiles-europe-supply-chains-fuel-reserves) that holds reserves of fuel, grain, and medicine and [rehearses](https://www.bloomberg.com/news/features/2026-06-24/finland-s-secretive-training-course-prepares-its-elite-for-war) shortages alongside the private companies that would actually have to manage them. Estonia fields a volunteer cyber unit within its Defense League, [a militia under the command of its defense ministry](https://www.reuters.com/article/world/wary-of-russia-estonian-volunteers-rush-to-join-militia-idUSKCN0RE12W/). The volunteers are civilians with day jobs who train with the state and show up when attackers strike. They run exercise programs [built around](https://digitalfrontlines.io/2023/08/31/lessons-from-estonias-whole-of-society-approach-to-cyber-defense/) cyber resilience, information sharing, and public-private partnerships. So what does Washington need to do to harden America’s water systems and other critical infrastructure? First, America needs to broadly embrace a whole-of-society “total defense” approach to homeland security, adopting and adapting innovative ideas from partners and allies. More specifically, policymakers can take three specific steps now that will help prepare for, and perhaps deter, the next attack. First, they should renew the State and Local Cybersecurity Grant Program, a small grants program for states that helps build state and local level cyber defenses. The program has already lapsed once and now runs on year-to-year extensions, which is no way to fund a defense. Make it permanent and carve out a sizable share for water. Second, Washington should set a response floor for water municipalities and measure it in hours. Electric utilities operate under binding federal cyber standards backed by real financial penalties. Water utilities have no equivalent, and the Environmental Protection Agency currently has no authority to impose one. Congress should give it a narrow version: every system above a modest size must be able to run manually for 72 hours and must prove it in an annual drill. This is not a technology mandate; it is a time standard, and it is the only number that matters once the pumps stop. Braham did it in 90 minutes. That should be the benchmark. Finally, the U.S. needs to build the bench. There are roughly 50,000 small water systems in this country, and most have no dedicated IT staff at all. No grant program can hire its way out of that. Governors can act tomorrow with authorities they already have: cyber teams in the National Guard on standing state active duty orders, tied to a water mutual aid compact modeled on the one power companies use to restore each other’s lines after hurricanes. When a plant serving 1,800 people gets hit at two in the morning, somebody should already have the phone number. A country that can afford 11 aircraft carriers can afford to teach 50,000 water operators to turn a valve by hand. Resilience is not a consolation prize for failed deterrence. By forcing an adversary to think twice about whether an operation will succeed, resilience is deterrence. _The original version of this story included a photo of a treatment plant that was not mentioned in this article. It has been replaced._ ```json [{"@context":"https://schema.org","@type":"OpinionNewsArticle","@id":"https://time.com/article/2026/08/19/america-water-systems-cyber-attack-trump-/","mainEntityOfPage":{"@type":"WebPage","@id":"https://time.com/article/2026/08/19/america-water-systems-cyber-attack-trump-/"},"headline":"America’s Water Systems Are Under Attack. We Are Not Ready.","datePublished":"2026-08-19T10:00:00.000Z","dateModified":"2026-08-20T19:07:47.215Z","description":"The Trump Administration has been gutting U.S. cybersecurity capabilities at a time when we need to deter and defend against increasing hybrid threats.","url":"https://time.com/article/2026/08/19/america-water-systems-cyber-attack-trump-/","keywords":["U.S."],"thumbnailUrl":"https://static.time.com/v3/assets/bltea6093859af6183b/blt651fded6c6f7efa4/6a8750223d34b55be72cc585/Water-Treatment-Cyber.jpg?branch=production&width=1200&quality=75&auto=webp&crop=1200:675&height=675","author":[{"@type":"Person","name":"Alexander Noyes","jobTitle":"Contributor","url":"https://time.com/author/alexander-noyes/"}],"articleSection":"Ideas","image":[{"@type":"ImageObject","url":"https://static.time.com/v3/assets/bltea6093859af6183b/blt651fded6c6f7efa4/6a8750223d34b55be72cc585/Water-Treatment-Cyber.jpg?branch=production&width=1200&quality=75&auto=webp&crop=1200:675&height=675","width":1200,"height":675,"headline":"Water-Treatment-Cyber.jpg","caption":"","creditText":"Anna Efetova—Getty Images","representativeOfPage":true}],"publisher":{"@type":"Organization","name":"Time","url":"https://time.com/","logo":{"@type":"ImageObject","url":"https://time.com/images/logo.png","width":528,"height":156},"foundingDate":"March 3, 1923","sameAs":["https://www.facebook.com/time","https://www.instagram.com/time/?hl=en","https://twitter.com/time","https://www.pinterest.com/timemagazine"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"@id":"/section/ideas/","name":"Ideas"}},{"@type":"ListItem","position":2,"item":{"@id":"/tag/u-s/","name":"U.S."}},{"@type":"ListItem","position":3,"item":{"@id":"https://time.com/article/2026/08/19/america-water-systems-cyber-attack-trump-/","name":"America’s Water Systems Are Under Attack. We Are Not Ready."}}]},{"@context":"https://schema.org","@type":"VideoObject","name":"What to know about the cyberattacks targeting U.S. water systems","description":"Malicious cyber activity has affected technology at water systems in at least seven states last week, forcing some facilities to switch to manual operations and prompting the FBI and Environmental Protection Agency (EPA) to warn facilities nationwide of hackers.","thumbnailUrl":"https://cdn.jwplayer.com/v2/media/4FuHyPr2/poster.jpg?width=720","uploadDate":"2026-08-06T16:45:16.000Z","contentUrl":"https://cdn.jwplayer.com/manifests/4FuHyPr2.m3u8","embedUrl":"https://time.com/article/2026/08/19/america-water-systems-cyber-attack-trump-/","duration":"PT1M21S","potentialAction":{"@type":"SeekToAction","target":"https://time.com/article/2026/08/19/america-water-systems-cyber-attack-trump-/?jw_start={seek_to_second_number}","startOffset-input":"required name=seek_to_second_number"}}] ```