New York Invests $9 Million to Shore Up Cybersecurity at 153 Water Utilities

New York has announced $9 million in grant funding to support cybersecurity improvements across 153 water and wastewater systems statewide. The funding will allow local governments to assess their current cyber defences and implement stronger protections, coming amid a broader multistate campaign of attacks targeting water infrastructure providers.

Water utilities have increasingly become targets for cybercriminals and state-linked threat actors because they often run on ageing industrial control systems with limited security budgets and staff. While this funding initiative is specific to New York, it highlights a global trend: attackers are actively probing critical infrastructure providers, including smaller regional operators, not just major metropolitan systems.

For Australian small businesses, particularly those supplying services, software, or equipment to utilities, councils, or critical infrastructure operators, this news is a reminder that the entire supply chain is under scrutiny. Attackers often use smaller vendors as a stepping stone to reach larger, more valuable targets, making basic cyber hygiene essential even for businesses that don't consider themselves high-risk.