Small water and wastewater utilities across the United States may soon receive a much-needed boost to their cybersecurity defenses, following the reintroduction of bipartisan legislation in the Senate.
Senators Catherine Cortez Masto (D-Nev.) and Mike Rounds (R-S.D.) have revived the Cybersecurity for Rural Water Systems Act, a bill aimed at updating and expanding the Department of Agriculture’s Circuit Rider Program, which provides technical assistance to rural water systems. The proposed legislation seeks to bolster cyber protection for small water utilities that often lack the resources to defend themselves against increasing cyber threats.
According to a press release announcing the bill’s reintroduction, only 20% of water and wastewater systems across the country currently maintain basic cyber protection.
“As our near-peer adversaries continue to utilize cyberattacks, we must have cybersecurity safeguards in place to protect our critical infrastructure such as water systems,” Senator Rounds said in the press release. “Our legislation would modernize and expand the Circuit Rider Program, providing cybersecurity-related technical assistance to rural water and wastewater systems.”
Addressing critical threats to rural water infrastructure
The bill follows a series of warnings from the Biden administration about the vulnerability of U.S. water infrastructure to cyberattacks. Last year, the administration urged state and local officials to enhance cybersecurity measures in response to disabling attacks targeting water systems. Just months later, a major water utility, American Water Works Company, was targeted by cybercriminals, though its water services remained unaffected.
Supporters of the legislation argue that rural water systems are particularly at risk. These smaller utilities often operate on tight budgets, limiting their ability to invest in cybersecurity. The bill is backed by the National Rural Water Association (NRWA), the Rural Community Assistance Partnership (RCAP), and Cyber Solarium 2.0.
“These water systems face real and immediate threats from both criminals and nation-state actors that can have consequences on national security, economic productivity, and public health and safety,” said Rear Adm. (Ret.) Mark Montgomery, executive director of the Cyberspace Solarium Commission. “The existing Circuit Rider Program that this leverages is a proven vehicle for delivering security solutions.”
Expanding support for rural utilities
The Cybersecurity for Rural Water Systems Act is part of a broader legislative effort to support rural water infrastructure. Senator Cortez Masto has also introduced the Rural Water System Disaster Preparedness and Assistance Act, a bipartisan bill co-led by Senator Cindy Hyde-Smith (R-Miss.). This bill aims to enhance disaster preparedness for rural utilities, helping them withstand extreme weather events and natural disasters.
“Between increasing cyber threats and extreme weather disasters, rural Nevadans are experiencing more and more challenges, and it’s critical that their drinking water and wastewater systems are optimized to withstand such events,” said Senator Cortez Masto. “My bipartisan legislation will help protect rural water utilities and ensure they have the resources they need to support our communities all year round.”
The disaster preparedness bill proposes the creation of an assistance program within the U.S. Department of Agriculture (USDA) to help rural water utilities identify vulnerabilities, develop disaster response plans, and train employees for emergency situations. This initiative, like the cybersecurity bill, has garnered support from industry groups including NRWA and RCAP.
“Disasters and cyber threats can devastate small utilities that often lack the resources to prepare and respond effectively,” said Olga Morales Pate, CEO of the Rural Community Assistance Partnership. “These bills provide essential funding and technical assistance to help rural communities enhance emergency preparedness, strengthen cybersecurity defenses, and safeguard critical infrastructure.”
The path forward
While similar legislation stalled in the previous Congress, lawmakers are optimistic that the renewed push will gain traction. As cyber threats continue to evolve, the focus on securing critical infrastructure—including water and wastewater utilities—has gained bipartisan recognition as a national security imperative.
“The Cybersecurity for Rural Water Systems Act of 2025 will create ‘Circuit Rider’ cybersecurity specialists who will directly deliver onsite training and technical assistance to rural utilities across our nation,” said Matt Holmes, CEO of the National Rural Water Association. “On behalf of our 31,000 members, NRWA applauds Senators Cortez Masto, Hyde-Smith, and Rounds’s efforts to protect and enhance the public health and economic vitality of rural communities and create a more resilient, prepared, and secure water sector.”
With bipartisan backing and strong support from rural advocacy groups, lawmakers hope these measures will equip small water utilities with the resources they need to defend against cyber threats and climate-related disasters—ensuring safe and reliable water access for millions of Americans.
