Texas launches water cybersecurity pilot as funding and success measures remain unclear

Participating water and wastewater utilities are set to receive security assessments and hands-on remediation through Project Watershed 250, a six-month programme intended to inform a cybersecurity model that could be used across the United States.

Texas Cyber Command announced the programme’s launch on 31 August 2026, with Texas selected as the first pilot state. It said participating operators would receive cybersecurity assessments, practical remediation support and emerging defensive measures.

The programme follows confirmed malicious activity affecting water and wastewater facilities across several states. The Hack Academy reported on that campaign on 2 August, including disruption involving internet-facing programmable logic controllers, or PLCs, and uncertainty over a possible Iran connection. Project Watershed 250 is the material development since that coverage: an organised attempt to help utilities identify and address weaknesses rather than another warning about the threat.

The National Association of Water Companies described the project as a six-month pilot involving the White House Office of the National Cyber Director, the Environmental Protection Agency, the Cybersecurity and Infrastructure Security Agency, Texas Cyber Command and private-sector participants. Texas Cyber Command said the initiative originated through the Office of the National Cyber Director.

Unlike guidance that tells operators which defensive controls to prioritise, Project Watershed 250 is described as providing assessments and hands-on assistance with remediation. The public material does not quantify the extent of that assistance or explain how completed remediation will be verified.

Texas was named as the first pilot state, but the reviewed announcements do not explain the selection criteria in detail. They also do not identify the participating utilities, provide their number or set out an enrolment timetable. Those omissions make it difficult to assess how broadly the pilot will represent the resource and security conditions found across the water sector.

Confirmed disruption, uncertain attribution

The programme arrives after Texas Cyber Command said it was tracking attacks against water and wastewater operators in multiple states. According to the agency, threat actors disrupted internet-facing PLCs and caused operational impacts. Its announcement did not identify every affected facility or quantify those effects, and no authoritative public attribution for the broader campaign has been established.

That distinction matters because several incidents and allegations have been discussed together in public debate without evidence of a common actor, vulnerability or intrusion method. Representative Brian Babin, speaking at a House Environment Subcommittee hearing on 21 May, described the January 2024 Muleshoe event as a reported hack that resulted in a water spill. The reviewed record contains no primary municipal, state investigative or law-enforcement finding confirming the full account.

California Water Service presents a separate case in which the confirmed scope was considerably narrower than the claims made about the incident. In a company statement reported by Security Magazine, the utility said its Mandiant-supported investigation found unauthorised activity involving a small number of accounts on two third-party service platforms. Stolen credentials were used to enter one active customer’s online account and a separate third-party site.

California Water Service reported no evidence of threat-actor activity in its internal IT or operational technology environments, no compromised payment information and no disruption to critical water production or delivery. As reported by Livermore Vine, the group calling itself Handala Hack Team claimed broader access to company data and the ability to interrupt service, but those assertions remain disputed. The affected organisation’s investigation did not confirm the actor’s identity or its claimed access to water operations.

The California incident and the PLC disruptions therefore should not be presented as one campaign with one technical cause. One involved confirmed credential-based access to limited third-party accounts. The other involved disruption of publicly reachable industrial controllers. No shared product flaw, vulnerability or common intrusion chain has been established.

Support is defined more clearly than success

Project Watershed 250 has a stated service model, but its measures of success remain unclear. The reviewed public material does not specify how many assessments must be completed, how remediation will be verified or what reduction in exposure would constitute an effective result. Reporting obligations, independent evaluation and plans for publishing findings have also not been established.

Funding is another unresolved issue. Federal and state contributions, private-sector commercial arrangements and the programme’s total resource commitment have not been made clear. That information will influence whether the pilot demonstrates a model that can be reproduced elsewhere or a short-term intervention dependent on support that other utilities may not receive.

The resource question is particularly relevant to the programme’s national ambitions. In his May opening statement, Babin said the United States had more than 50,000 community water systems and that many operated with limited technical resources. His comments provide policy context rather than measured results from Project Watershed 250, but they identify the practical problem that hands-on remediation is intended to address.

There is also no detailed public methodology for how defensive testing will be conducted around live operational systems, how sensitive findings will be handled or what safeguards will apply to information shared among government and private-sector participants. The announcements refer to emerging defensive measures, but they do not establish which capabilities each utility will receive.

In his 8 September Fox News opinion, Babin promoted approaches including AI-enabled detection and cyber-informed engineering as part of the policy discussion. Those remain proposed capabilities rather than demonstrated outcomes from the Texas pilot. Project Watershed 250 had not produced public evidence by the 9 September research cutoff showing that such measures had prevented an intrusion or contained an operational incident at a participating utility.

Defensive lessons beyond the pilot

While the project is confined to Texas, its core defensive priorities are relevant to water operators elsewhere. CISA guidance calls for important operational technology assets to be removed from direct public-internet exposure where possible. Remote-access services should be secured and monitored, with multi-factor authentication and strong, unique credentials required.

Other measures include applying supported software and operating-system updates in line with vendor advice and operational-safety requirements, segmenting business and process-control networks, enabling appropriate logging, maintaining incident-response contacts and testing recovery procedures. These are risk-reduction and resilience measures, not patches for a single vulnerability. The reviewed material does not identify a common affected product, CVE or fixed version across the activity described here.

The same principles are transferable to Australian water operators, particularly around exposed operational technology, remote access, segmentation and constrained security resources. This development does not establish a direct Australian incident, regulatory change or local pilot, however. Any such conclusion would require current Australian primary sourcing.

For Project Watershed 250, the confirmed next phase is six months of assessments, remediation support and defensive work with participating Texas utilities. Whether that period produces a credible national model will depend on information that has yet to be published, including who participated, what changed, how results were measured and whether independent scrutiny will be possible.

Water-sector reviews bring remote access, segmentation and public internet exposure into the same defensive picture. Readers can explore the underlying relationships through The Hack Academy’s online cybersecurity training programme, which lists networking and internet vulnerabilities and combines self-paced learning with practical exercises alongside theory.