Hackers breach American Water Works networks, company shuts down certain systems

American Water Works, one of the largest suppliers of drinking water and wastewater services in the U.S., announced on Monday that its computer networks had been compromised in a cyberattack. The Camden, New Jersey-based utility, which serves more than 14 million people, discovered the breach on Thursday and immediately took action by shutting down certain systems to protect customer data and prevent further damage.

In a regulatory filing, American Water Works stated that, so far, there is no indication that its facilities or operations were affected by the breach. Still, it remains uncertain about the full extent of the attack’s impact. A company spokesperson confirmed to CBS News that they disconnected or deactivated systems in response to the incident as a precautionary measure. Customers will not face late charges while these systems are down.

The company is working around the clock to investigate the scope of the cybersecurity breach, and law enforcement has been notified. American Water Works is cooperating with authorities as they continue to assess the situation.

As the U.S.’s largest regulated water and wastewater utility company, American Water provides services to more than 14 million people across 14 states and 18 military installations. Despite the proactive steps taken to mitigate the threat, shares of American Water fell by 2%, down $2.87, to $139.71 in early morning trading.

The breach comes amidst growing concern in the U.S. about cyberattacks targeting critical infrastructure, with officials increasingly wary of alleged efforts by Chinese intelligence to infiltrate key networks, including water-treatment facilities. According to a recent report from the Wall Street Journal, a cyberattack on U.S. broadband providers was linked to the Chinese government, heightening fears of similar attacks on critical U.S. services.