Senate Democrats introduce $300M water cybersecurity bill

Senate Democrats led by Sens. Adam Schiff (Calif.) and Amy Klobuchar (Minn.) unveiled the Water Cyber Shield Act on Monday, proposing a $300 million annual boost to state revolving funds to shore up cyber defenses for U.S. drinking and wastewater systems.

The bill arrives after a surge of digital assaults on water facilities. In 2023 the Environmental Protection Agency counted more than 150 incidents affecting water and wastewater systems, including ransomware attacks that disrupted operations in Texas and Pennsylvania. A February 2024 advisory from the Cybersecurity and Infrastructure Security Agency warned that hostile actors—often state-linked groups—see water systems as soft targets because many utilities run on aging equipment with weak security.

Under the legislation, drinking-water and clean-water state revolving funds would each receive $150 million a year for grants to upgrade monitoring, hire cyber specialists, and install modern protections. States would prioritize systems serving small and rural communities, which rarely have dedicated IT budgets. Klobuchar said the bill “ensures our water systems have the tools to prevent and recover from cyber threats,” while Schiff stressed that “water is life—and it should not be at the mercy of hackers.”

The measure faces an uphill path. House Republicans have backed cybersecurity grants for water systems but with less funding and stricter oversight. The bill also needs buy-in from the EPA, which is still finalizing mandatory cybersecurity standards for the sector. Next steps include a Senate Environment and Public Works Committee hearing this fall; if passed, the extra money could start flowing in fiscal 2026. With climate change straining infrastructure and digital threats growing, advocates argue that securing water networks is no longer optional.