American Water, the largest regulated water utility in the United States, has revealed a serious cybersecurity incident that has led to the shutdown of its customer portal and a temporary suspension of billing services.

The New Jersey-based company serves over 14 million customers across 24 states and 18 military installations.

On October 3, American Water detected unauthorized activity within its systems and immediately disconnected affected components.

The company has not disclosed specific technical details about the breach but suggested that it may involve ransomware.

Despite this alarming situation, American Water insists that its water supply remains safe and that operations at its facilities have not been compromised.

To mitigate potential damage, the company has activated third-party cybersecurity professionals to assist in an ongoing investigation.

American Water has assured customers there will be no late fees or service interruptions while the MyWater portal remains offline.

This incident underscores a troubling trend of cyberattacks targeting critical infrastructure, prompting federal officials to advocate for enhanced security measures in the water sector.

As vulnerabilities in utilities become increasingly apparent, questions about their resilience against cyber threats loom large.