American Water Works reports unauthorized network activity and disconnects some systems

American Water Works, the largest regulated US water and wastewater utility, disclosed on October 7, 2024 that it had learned on October 3 of unauthorized activity in its computer networks and systems. It disconnected or deactivated some systems as a protective step.

What the utility reported

For a utility, the key statement concerned physical operations.

The company notified law enforcement and said it was coordinating fully with investigators. It brought in outside cybersecurity experts for containment and investigation. It filed under Item 8.01 and expected no material effect.

What remains open

The filing does not say which systems were disconnected, whether customer-facing services such as billing were affected, or whether data was taken, and this log holds no follow-up 8-K for the incident.