Following recent targeted cyberattacks on water systems spanning several U.S. states, the Office of Massachusetts State Treasurer Deborah B. Goldberg, through the work of the Massachusetts Clean Water Trust (the Trust) and in partnership with the Massachusetts Department of Environmental Protection (MassDEP), are highlighting the need for investments in cybersecurity at local drinking water facilities to protect public health and safety. The state is supporting this vital need through the Public Water Suppliers Cybersecurity Improvements Grant Program, created to combat the growing threat of these malicious attacks. The program is currently accepting applications and communities can apply as soon as possible.
“As cyber threats become more frequent and sophisticated, we must ensure our local water suppliers have the resources they need to protect their systems,” said State Treasurer Deborah B. Goldberg, Chair of the Massachusetts Clean Water Trust. “This grant program allows our state’s smaller and most at need communities to continue improving critical security infrastructure to safeguard public health for their residents.”
While the nature of the recent attacks is still under review, it is understood that hackers are remotely accessing PLCs (Programmable Logic Controllers), changing administrator passwords and causing disruption to operations not limited to but including pressure loss and flooding. Outdated software, weak network security, vulnerable access controls and a lack of employee cybersecurity training are all threats to critical US water infrastructure.
“Massachusetts has some of the oldest infrastructure in the nation, and it was built long before cybersecurity was a consideration,” said MassDEP Commissioner Bonnie Heiple. “Water systems, particularly those in small, rural, and underserved communities, face heightened risks due to aging infrastructure and limited funding. As cyber risks continue to evolve, MassDEP is committed to ensuring water systems have the financial and technical resources they need to safeguard the water residents rely on every day.”
Massachusetts is working closely with its public water suppliers to assess risk and mitigate attacks with the help of $2 million in grant funding made available by the Trust and MassDEP.
Since 2024, the Trust and MassDEP have been offering grants for up to $50,000 to eligible Public Water Suppliers (PWSs) with a cybersecurity risk assessment and at-risk operational technology equipment. To be eligible to apply, a PWS must meet criteria as a small system or a disadvantaged community.
The program’s goal is to support PWSs in improving their cybersecurity defense, mitigate risks of cyberattacks, and enhance overall resiliency and compliance. The grant supports projects that address cybersecurity vulnerabilities identified through PWS cybersecurity assessments that could impact the quality or quantity of our drinking water.
As of July 2026, the program has provided $1.3 million in grants to 38 water systems. Public Water systems are eligible to receive up to $50,000 through the State Revolving Fund to mitigate cyber risks.
MassDEP anticipates an increase in grant applications as cybersecurity needs continue to grow and the statewide sanitary survey, which includes cybersecurity requirements, prompts more PWSs to apply for funding. In addition to grant funding, MassDEP created a Cybersecurity Resource Hub to provide resources for Public Water Systems across the state. The hub includes assessments, training, and emergency planning tools for public water systems.
For More Information
To see if your water system is eligible for a cybersecurity improvement grant, visit the Trust’s Public Water Suppliers Cybersecurity Improvements Grant Program page for more details.
About the Clean Water Trust
Since its establishment in 1989, the Trust has loaned roughly $10.4 billion to improve and maintain the quality of water in the Commonwealth. An estimated 97 percent of Massachusetts’ residents have benefited from the financial assistance of the Trust.