EPA funds water utilities to defend against cyber attacks and disasters

What it does

This bill directs the EPA to establish a program within one year that helps drinking water and wastewater systems prepare for and respond to cyber attacks, physical threats, and natural disasters. The program will fund water utilities' participation in an information-sharing network (the Water Information Sharing and Analysis Center), help them share threat data with the EPA, and provide tools to detect and recover from attacks or emergencies. It authorizes $10 million per year for fiscal years 2026–2027.

Why we flagged it

The bill's operative mechanism is straightforward: fund EPA coordination with water utilities on cybersecurity and resilience. It is a public-health and infrastructure-protection measure, not a deregulation, subsidy to private firms, or commemorative act.

What the text implies

• The bill references but does not define the Water Information Sharing and Analysis Center (WaterISAC), which is a private nonprofit entity. Funding utility participation in a private information-sharing network may create dependency on that entity's governance and data practices, though the bill does not grant WaterISAC regulatory authority.
• The program's success depends on EPA capacity to coordinate with utilities and WaterISAC; no staffing or administrative resources are authorized, only the $10M for utility cost-offsets. Implementation may be constrained if EPA lacks personnel to manage the program.
• The bill authorizes funds only through FY 2027; long-term sustainability of utility participation and threat-monitoring infrastructure is uncertain after that date.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

Water system resilience and cybersecurity directly protect public health and continuity of essential services. Funding utilities to participate in threat-sharing and preparedness activities reduces the risk of contamination, service disruption, or attack affecting millions of households. No offsetting cost to citizens is apparent from the text.

Who stands to gain

• community water systems and publicly owned treatment works (cost-offset recipients)
• Water Information Sharing and Analysis Center (increased participation and EPA coordination)

Named in the bill

Environmental Protection Agency (EPA), Water Information Sharing and Analysis Center (WaterISAC), community water systems, publicly owned treatment works, Safe Drinking Water Act, Federal Water Pollution Control Act

Where it stands

• Mar 25, 2025 — Introduced · Congress.gov: “Introduced in Senate”
• Mar 25, 2025 — Referred to Senate Committee on Environment and Public Works · Congress.gov: “Read twice and referred to the Committee on Environment and Public Works”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

5 lobbying clients named this bill on 7 disclosure filings across 2 quarters, Dec 2025 to Jun 2026. Those filings disclosed $1,160,000 in lobbying spend. A filing names 17 bills on average, so that figure is what each filing reported, not a share belonging to this bill.

More lobbying clients named this bill than 78% of bills with at least one filing.

Ed Markey, the sponsor, reported $658,450 in PAC receipts in the 2026 cycle.

• National Rural Water Association — $420,000 on 1 filing
• American Water Works Association — $250,000 on 2 filings
• Association of Metropolitan Water Agencies — $220,000 on 2 filings
• National Association of Clean Water Agencies — $140,000 on 1 filing
• Santa Clara Valley Water District — $130,000 on 1 filing

Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.