Avelar Bill Aims to Safeguard Illinois Drinking Water from Cyber Threats

SPRINGFIELD, Ill.- State Rep. Dagmara ‘Dee’ Avelar, D-Romeoville, has introduced legislation that would require new cybersecurity provisions to be applied to entities that manage public water systems responsible for supplying, treating and delivering fresh drinking water in Illinois in order to combat cyber-attacks. 

“Other states have implemented cybersecurity laws toward their public water facilities to prevent the disruption of water flow in their states and communities, and it’s about time that Illinois does the same,” said Avelar. “We need to ensure that Illinoisans are not impacted by these cyberattacks that could negatively affect their day-to-day lives.”

Avelar’s House Bill 3576 would require water purveyors, entities managing fresh water and waste water in public communities, to develop a cybersecurity program within 120 days of the bill passing that would establish accountable, comprehensive policies to combat cyber risks and prevent attacks. Within 180 days, they will be required to have and apply to the water systems. 

Many water purveyors have a digitized and online monitoring, operations and communications system that can be outdated and/or have weak passwords making them potentially hackable. These attacks can alter chemical levels in water, disrupt the flow of water to customers, steal customers data and even shut down the water pumps. 

“This legislation reforms the procedures our public water facilities take to improve basic cybersecurity measures and prevent customers from paying the price,” said Avelar. “With rising costs, everyday utilities and necessities have become expensive, and this legislation removes one more potential cost taxpayers could pay. As we face the challenges of evolving technology, Illinois must stay ahead of the curve.”