Issuu

Utilities Section

Newsletter League of Nebraska Municipalities

August 2026

Hackers Hit U.S. Water Systems: Why recent cyberattacks are a wake-up call for critical infrastructure By Lockton Cyber & Technology Practice; August 2026 A series of coordinated cyberattacks targeting municipal water systems across the United States has renewed concerns about the vulnerability of critical infrastructure. Although no drinking water contamination was reported, the incidents demonstrated how cybercriminals can disrupt essential public services by compromising operational technology (OT) systems that manage water treatment and distribution. Between July 26 and 27, 2026, more than 30 municipal water systems in Minnesota experienced cyberrelated disruptions. Communities including Braham, Plymouth, South St. Paul, and Maple Plain reported issues affecting automated water and wastewater operations. Federal cybersecurity officials reported that attackers gained access to programmable logic controllers (PLCs), the industrial computers responsible for critical infrastructure processes. In several cases, operators were locked out after passwords were modified. Importantly, water quality was not affected, and operators maintained service through manual controls and contingency procedures. While no organization has officially

1335 L Street Lincoln, NE 68508 (402) 476-2829 info@lonm.org

been identified as responsible, preliminary assessments suggested a possible connection to Iranian-linked threat actors. No ransom demand was reported, indicating disruption rather than financial gain may have been the objective. The response quickly expanded to include state and federal agencies. Minnesota activated a statewide cybersecurity response, while the FBI and EPA issued nationwide warnings to water utilities. The broader lesson extends well beyond the water sector: attackers do not need to physically damage infrastructure to create significant operational disruption. Gaining access to OT environments and denying legitimate access can interrupt services and trigger emergency response actions. For executives and risk managers, these events are a timely reminder that cyber risk is business risk. As threat actors increasingly target operational technology and critical infrastructure, organizations must ensure their security controls, recovery capabilities, and insurance programs keep pace with the evolving threat landscape.

Key Steps to Reduce OT Cyber Risk • Isolate operational technology from the public internet wherever possible. • Eliminate default credentials and strengthen authentication controls. • Review and validate remote access and third-party connections. • Maintain tested manual and business continuity procedures. • Ensure incident response plans address operational technology environments. What Organizations Can Do Any organization that relies on industrial control systems should use this incident as an opportunity to reassess core cyber controls. The following measures remain among the most effective ways to prevent these events or limit their impact: • Segment IT and OT networks to reduce the likelihood of a compromise spreading into operational systems. • Require MFA for all remote access, particularly connections into OT environments. • Strengthen privileged access controls by restricting admin rights, rotating credentials, and eliminating shared or default passwords. Continued on page 2

Lash Chaffin Utilities Section Director Jackson Sash Utilities Field Representative

 Utilities Section Newsletter

August 2026

Hackers Hit U.S. Water Systems Continued from page 1 • Deploy EDR/MDR monitoring across IT and OT environments to identify and respond to suspicious activity quickly. • Maintain disciplined patching and vulnerability management, prioritizing internet-facing systems and critical assets. • Keep immutable, tested backups of IT and OT data to support rapid recovery. • Develop and test OT-specific incident response plans, including manual operating procedures where appropriate. • Assess third-party and vendor access with the same rigor applied to internal users. • Conduct regular tabletop exercises to validate response

plans and identify gaps before an incident occurs. The most important takeaway is that continuity planning works. The affected utilities maintained essential services because they were prepared to operate manually when automated systems became unavailable. Key Resources 1. CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs (July 30, 2026). 2. Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across U.S. Critical Infrastructure (Originally Published April 7, 2026; Updated July 22, 2026). 3. CISA and EPA Toolkit for Water and Wastewater Cybersecurity.

65 2026

Modern Rewind Facilities More than 61 Acres Inventory Prompt Delivery-Coast to Coast

CALL TOLL FREE 800-843-7994 FAX 605-534-3861 E-MAIL: t-r@t-r.com Internet: www.t-r.com

BUY - SELL - RENT

Utilities Section Newsletter, Page 2

Complete Outdoor Substations, Circuit Breakers, Regulators, and Switchgear

 Utilities Section Newsletter

August 2026

Harvest is Coming: Getting utilities ready for fall By Jackson Sash, Utilities Field Rep./ Training Coordinator For virtually all our Nebraska communities, late summer marks the beginning of a transition. While the days are still hot and the trees are still green, fall is rapidly approaching. Fall approaching means that harvest could start any day. This translates to increased traffic, the potential for excessive dust, and changes in water use and demand. Harvest can introduce issues into your municipal utilities but by planning ahead, we can considerably reduce their impact. During harvest, traffic explodes even in rural areas of Nebraska. Large farm equipment, heavy trucks loaded with grain, and just a general increase in the number of vehicles driving around are all issues that can be expected. Farm equipment is rarely configured in such a way that it takes up the same or less space on the road as a passenger vehicle. These large and often heavy pieces of equipment are much more likely to accidentally strike or damage infrastructure simply due to their size. Utilities should be aware of areas in your community where particularly

vulnerable infrastructure is present. Locations like main thoroughfares, narrow streets, grain elevators, and overhead power lines should receive special attention and more frequent inspections. The inherent characteristics of large agricultural vehicles (oversized loads/vehicles, impaired visibility, wide turning radii, etc.) make them especially likely to strike your infrastructure while they travel through your community. Many of the vehicles that are part of harvest traffic aren’t just large, they also can be extremely heavy. Agricultural vehicles that are oversize or overweight may be exempt or subject to alternate rules from the federal and state regulations. This applies so long as they are being used or transported for normal farm operations. For example, Nebraska has a provision that allows 8-axle combination vehicles to operate at up to 96,000 pounds (lbs.) gross vehicle weight (GVW) on designated state routes. This could mean a semi hauling grain could have a GVW up to 96,000 lbs. If you are above this limit, you will need to acquire a permit. In addition to state regulations, cities, villages, and counties may

have their own special size and weight restrictions or permits in their associated jurisdictions. These restrictions exist for very important reasons, mainly safety and preventing wear and tear on roads. Large and/or heavy vehicles are more dangerous on the road than passenger vehicles or even “underloaded” semis. Heavier vehicles handle differently, which potentially makes steering stiffer, lane changes harder to manage, increases rollover chances, and increases your needed stopping distance. For example, a fully loaded 80,000 GVW semi may require up to 40% more distance to stop compared to a passenger vehicle. A vehicle pulling heavy loads may also experience more mechanical issues that can become extreme safety issues. Braking systems can overheat especially in areas with higher road grades leading to reduced or even eliminated stopping ability. The heavy weight can also lead to increased heat and pressure in the wheels leading to tire blowouts. This can cause a vehicle to lose control and leave dangerous debris on the road. Typically, roads are built to support up to around 4,000 lbs. per square Continued on page 4

Engineering a world where everyone thrives.

Utilities Section Newsletter, Page 3

 Utilities Section Newsletter

August 2026

Harvest is Coming: Getting utilities ready for fall Continued from page 3 inch (PSI) meaning they can support up to 4,000 lbs. of crushing force before failing. This translates to around 20,000 lbs. per axle on an 80,000 GVW vehicle. A vehicle that is above this limit can cause significant damage to roadways and associated infrastructure. For example, bridges are built to withstand specific maximum weights as shown in the picture. When these weight limits are not obeyed, microcracks can be generated in the steel, concrete, or wood that the bridge is built from which reduces

Weight limit sign on bridge.

the strength of the structure. These microcracks are worsened every time an overweight vehicle passes. This can lead to a bridge collapse over time, but it is also possible for a bridge to outright collapse the first

time an overweight vehicle passes. Overweight or heavy vehicles can also damage underground infrastructure like culverts, water and wastewater mains, manholes, and utility vaults. When vehicles use a roadway, the pressure created is transferred from the road to the soil below and then from the soil to any infrastructure that may be present. This infrastructure may not be able to withstand the pressure that has been created leading to collapsed culverts and mains, cracked manholes, and damaged utility vaults. Continued on page 5

Leader in RICE NESHAP Compliance & Testing Stationary Diesel & Dual Fuel Engine Mechanics Multi-point Engine Inspection Service Complete Engine Sales, Installation and Removal Power Plant Design, Construction & Automation Large/Heavy Equipment & Machinery Transportation Parts & Service for: Alco, Caterpillar, Colt-Pielstick, Cummins, Cooper-Bessemer, DeLaval, EMD, Enterprise, Nordberg, Waukesha, Fairbanks Morse, Ingersoll-Rand, White Superior, Worthington and others

Farabee Mechanical, Inc. Hickman, NE 68372 • (402) 792-2612 farabee@inebraska.com

www.farabeemechanical.com Utilities Section Newsletter, Page 4

 Utilities Section Newsletter Harvest is Coming: Getting utilities ready for fall Continued from page 4 It is very likely that your utility system has encountered issues due to dust caused by harvest in the past. Dust is no stranger to a utility employee anytime of year, but during harvest, it can get to excessive amounts extremely quick. This will be exacerbated if your facilities are near grain elevators, feed operations, or an area with heavy grain handling activity. Dust can interfere with equipment, infrastructure, and your water storage alike. Dust can interfere with your equipment in many ways. Dust seems to have the tendency to work its way into all kinds of places that it does not belong. Electrical equipment, ventilation systems, pumps, motors, and other mechanical equipment are all subject to dust in some capacity. Excessive dust can clog air filters faster than other times of the year, work its way into bearings Continued on page 6

www.miller-engineers.com E IN G 308.234.6456 EN EN

I ER

TA L

WWW.MILCOINC.COM 308.237.5923

V UR

A PL

August 2026 Well Played: 2026 NeRPA Conference comes to Norfolk! The 2026 Nebraska Recreation and Park Association (NeRPA) Conference, themed “Well Played,” is coming to Norfolk Sept. 15–17. This year’s conference will bring parks and recreation professionals together for three days of professional development, networking, learning, and fun! Scan the QR code below to register. Attendees will have the opportunity to participate in six professional development sessions covering parks, recreation, and therapeutic recreation, along with facility and parks tours showcasing some of Norfolk’s recreational amenities. The conference will also feature 20+ vendors, equipment demonstrations, a 9-hole golf outing, whitewater tubing, meals and social events, prizes, raffles, and an auction. The conference will feature comedian and entrepreneur James Robilotta, presenting “Leading Imperfectly.” With a mix of education, connection, and recreation, the 2026 NeRPA Conference promises to be a great opportunity to learn, connect, and play well in Norfolk!

Utilities Section Newsletter, Page 5

 Utilities Section Newsletter

August 2026

Harvest is Coming: Getting utilities ready for fall Continued from page 5 of motors and pumps leading to increased wear and congest electrical components causing increased operating temperatures and shorts. Proactive maintenance is the best way to mitigate the issues dust can cause in your utility systems. Before the end of summer, check and replace air filters on vehicles, equipment, and infrastructure to ensure we are heading into harvest season ready to go. Checking doors, seals, and other protective components is critical to make certain that they are providing the protection they were designed to do. While cleaning and inspecting before harvest season, be sure to follow manufacturer recommendations for cleaning and repairs.

Water towers or other elevated water storage can act as a dust magnet due to the physical characteristics of how they work. Think of a water tower as a big lung elevated in the sky. As water is pumped into the tank or used throughout the system, the water level in the tank rises and falls. To protect against air pressure issues within the tank, there is a vent usually located at the top of the tank. This allows for air to enter and escape to maintain proper air pressure in the empty portion of a tank. As this happens, dust and other airborne debris get sucked into the tank and will settle on the surface of the water. This dust can lead to compliance issues during routine water sampling that can cause a boil water notice, taste issues, and customer complaints.

The best way to counteract the dust in your tower is to follow a practice known as overflowing your towers. Once a week (or less often if dust isn’t a huge issue), it is a good idea to pump water into the tower until it begins to overflow. When the water is overflowing, that dust and debris that had settled on the surface of the water gets washed out. It is critical that this is done before any significant mixing of the storage tank occurs so that the contamination is not further spread within the water system. Nebraska is an agricultural state, so these issues utility systems encounter due to harvest are an inherent part of operating in Nebraska. Beginning preparations for harvest before it begins is the best way to help protect your community.

Ideas Transform Communities At HDR, we’re helping our clients push open the doors to what’s possible, every day. hdrinc.com 402.399.1000 | Omaha 402.742.2900 | Lincoln

Utilities Section Newsletter, Page 6

 Utilities Section Newsletter

August 2026

2026 Training Calendar Visit our website for a complete list of workshops and conferences. September Sept. 15.............Water Operator Training Workshop.................. Fire Hall, Gering Sept. 16.............Backflow Workshop.......................................... Mid-Plains Community College, Ogallala Sept. 17.............Water Operator Training Workshop.................. Lexington Sept. 23-25........League Annual Conference............................... Cornhusker Marriott Hotel, Lincoln October Oct. 20...............Water Operator Training Workshop.................. Ainsworth Oct. 21...............Water Operator Training Workshop.................. St. Paul Oct. 22...............Backflow Workshop.......................................... Service Center, Beatrice December Dec. 8................Water Operator Training Workshop.................. Joe Hampton Conference Center/LNM, Lincoln Dec. 10..............Water Operator Training Workshop.................. Auburn

2026-27 Utilities Section Executive Board President Gary Thurlow Utility Superintendent Atkinson

2nd Vice President Matt Owens Water & Sewer Supvr. Imperial

Board Member Jeramie Van Leer Utility Superintendent Ord

Board Member Joel Hansen Street & Planning Director Wayne

1st Vice President Sarah Sawin Director of Utilities Kearney

Past President Pat Heath City Administrator Gering

Board Member Ryan Schmitz Utilities Director Grand Island

Ex Officio Member Kyle Svec City Admin./Utilities Supvr. Geneva

Utilities Section Newsletter, Page 7