28 Oct The Growing Risk of Cyberattacks on U.S. Infrastructure
Cyberattacks on critical U.S. infrastructure pose a significant and growing threat. Critical infrastructure encompasses a wide array of essential services, such as power plants, hospitals, transportation systems, and water treatment facilities. A cyberattack on any of these sectors could result in widespread disruption, financial damage, or even loss of life.
These risks are not abstract or theoretical, either. Last year, cyber groups linked to the Iranian government may have hacked multiple U.S. water utilities. In 2021, a ransomware attack on Colonial Pipeline, a major fuel pipeline operator, forced Colonial to shut down its entire network, disrupting fuel supplies along the East Coast and causing panic buying and price hikes. And the risks are growing: year over year, U.S. utilities have seen a 70% increase in cyberattacks in 2024 versus 2023 (1,162 cyberattacks vs. 689).
“These attacks have the potential to disrupt the critical lifeline of clean and safe drinking water, as well as impose significant costs on affected communities,” wrote Jake Sullivan, assistant to the president for National Security Affairs, and Michael S. Regan, administrator of the Environmental Protection Agency, in a letter to governors earlier this year.
Worse, cyberattacks targeting infrastructure are not limited to criminal groups seeking financial gain. Nation-state actors, including those from Russia, China, Iran, and North Korea, have demonstrated interest in targeting U.S. critical infrastructure. “[China’s] plan is to land blows against civilian infrastructure to try to induce panic,” FBI Director Christopher Wray said at the 2024 Vanderbilt Summit on Modern Conflict and Emerging Threats in April.
How is the U.S. Preparing?
Recognizing the seriousness of these risks, the federal government has taken significant steps to mitigate them. The Department of Homeland Security (DHS), through its Cybersecurity and Infrastructure Security Agency (CISA), plays a central role in defending the nation’s infrastructure. CISA works with private companies, which own and operate much of the infrastructure, to share threat intelligence, coordinate responses, and implement stronger cybersecurity measures.
CISA’s Cybersecurity Advisory Committee has released various initiatives, including the “Shields Up” campaign to alert organizations about the heightened cyber risks. This includes guidance on hardening systems, conducting vulnerability assessments, and preparing for cyber incidents. CISA Director Jen Easterly also testified in May that the cyber agency “has detected more than 1,900 threats on federal networks” using new tools spread across eight federal agencies, with five more in progress.
Additionally, the U.S. government is investing in long-term solutions. The Bipartisan Infrastructure Law, passed in 2021, allocates funding to strengthen cybersecurity in public infrastructure projects, while President Biden’s Executive Order on Improving the Nation’s Cybersecurity has prompted federal agencies to modernize their defenses and adopt more robust security frameworks.
Ultimately, cyberattacks on U.S. infrastructure represent a serious and growing threat with the potential for widespread disruption. The increasing likelihood of such attacks requires ongoing vigilance, collaboration between public and private sectors, and significant investments in cybersecurity.
About PSL
PSL is a global outsource provider whose mission is to provide solutions that facilitate the movement of business-critical information between and among government agencies, business enterprises, and their partners. For more information, please visit or email info@penielsolutions.com.
