Going Dark: The Cyber Drill Testing America's Water

The EPA is forcing US water utilities offline this July to test whether operators can keep water flowing without a single internet connection

8 Jun 2026

Federal regulators are preparing to take the nation's water infrastructure offline, deliberately. An Environmental Protection Agency drill scheduled for July 2026 will require municipal water and wastewater operators across the country to disable internet connectivity, cloud systems, and remote-control software, forcing workers to manage treatment facilities and pump stations entirely by hand. The exercise, officials said, is designed to assess whether utilities can sustain operations under conditions that a sophisticated cyberattack might impose.

The urgency behind the drill reflects a pattern of failures identified in federal safety reviews. More than 70 percent of inspected municipal systems did not meet baseline security standards after late 2023, leaving treatment plants and distribution networks exposed to remote exploitation. To address gaps before the simulation begins, the EPA has directed state revolving funds toward smaller and rural utilities, helping them install offline hardware components they could not otherwise afford.

Concern among local operators runs deeper than budget constraints. Utility managers have raised questions about supply disruptions during manual switchovers, when staff must rely on physical hand-valve controls rather than digital systems. A joint training program launched in early 2026 pairs those operators with cybersecurity specialists to develop emergency playbooks for digital blackouts, establishing secondary communication channels when centralized systems go dark.

Some analysts have questioned whether a single nationwide simulation can capture the variation across thousands of utilities that differ in size, staffing, and infrastructure age. Others note that offline resilience, while necessary, addresses only part of the threat: attackers who compromise systems before any drill begins may exploit vulnerabilities that a manual switchover cannot contain.

Still, federal officials frame the exercise as a turning point. By shifting the regulatory standard from paper compliance to demonstrated physical performance, the EPA is pressing utilities to prove, not merely document, their readiness. The outcomes of the drill are expected to inform federal infrastructure policy well into the next decade.