Bipartisan lawmakers, Senators Ruben Gallego and Tom Cotton, have introduced the Water Cybersecurity Enhancement Act to protect U.S. water systems from increasing cyberattacks, particularly those linked to foreign actors like China and Russia. These cyber threats have been connected to geopolitical tensions, including U.S. support for Taiwan, resulting in Chinese officials reportedly admitting involvement in infrastructure attacks. The bill proposes extending the Safe Drinking Water Act to offer technical support and grants for cyber defense training to community water systems. Recent incidents have highlighted the vulnerability of water utilities, such as a Russian hack on a Texas town's water system, underscoring the need for robust cybersecurity measures. The U.S. government emphasizes using all available tools to counteract these persistent threats and safeguard critical infrastructure.

Senators Ruben Gallego and Tom Cotton introduced a bipartisan bill aimed at strengthening cybersecurity for U.S. water systems against foreign cyber threats. This legislative effort responds to the rising frequency of cyberattacks targeting public infrastructure, with a focus on protecting water utilities from potential breaches.

The legislation seeks to expand the Safe Drinking Water Act's Drinking Water Infrastructure Risk and Resilience Program, providing technical assistance and grants to local water systems for improved cyber defenses. This move is seen as crucial to ensure the resilience of water services against hacking attempts.

Recent reports have implicated Chinese officials in a series of cyberattacks on U.S. infrastructure, which were allegedly motivated by America's support for Taiwan. These claims were reportedly made in private settings, with Chinese representatives attributing the attacks to a campaign called Volt Typhoon.

The Biden administration has been proactive in warning state leaders about the threats posed by hackers from countries like Iran and China, emphasizing the potential disruptions to water and wastewater systems. Administration officials highlighted the significant costs and risks to safe drinking water that such attacks could impose.

In January 2024, Russian hackers targeted the water system in Muleshoe, Texas, causing a major overflow and showcasing the vulnerabilities of local utilities to cyber threats. The attack was attributed to Sandworm, a group linked to Russia's GRU, demonstrating the global reach and impact of such cyber activities.

The U.S. State Department has made it clear to China that it will continue to counteract malicious cyber activities using all available measures to protect national security. This stance reflects a broader commitment to safeguarding critical infrastructure from international cyber threats.

The legislation introduced by Gallego and Cotton is seen as a commonsense approach to bolstering water security, providing necessary resources for prevention and response to cyber incidents, and supporting local utilities in building stronger defenses against future attacks.