Evidence Hub

Understanding the Developments in Cyber and Hybrid Threats to Water Utilities from 2020 to 2025: A Systematic Review

L. Anttila

ACM Symposium on Applied Computing, 2026

Abstract

Access to clean drinking water and effective wastewater treatment are fundamental to public health. As water utilities increasingly adopt digital technologies, they face a growing and evolving range of cyber threats, coupled with threats in the physical and information domains, also known as hybrid threats. These vulnerabilities are amplified by geopolitical tensions targeting critical infrastructure. Research into the water sector's cybersecurity, especially research that provides actionable guidance, remains limited. This systematic literature review analyzes the body of research on water utility cybersecurity published since the beginning of 2020. The review reveals a significant gap in research focused on practical, actionable guidance for water utilities. This highlights a disconnection between the recognition of water systems as complex cyberphysical-human systems and the operational tools and frameworks provided to secure them. A critical need exists for research that can empower often under-resourced utilities with actionable tools, underscoring a significant risk at the core of public health and national security.

How strong is the evidence?

Evidence Hub reads this as a systematic review. Its evidence level is 1 of 5 (Highest · pooled evidence). Pooled evidence from several studies sits at the top of the evidence pyramid.

How the five levels of evidence work. The level is assigned automatically from the abstract and can be wrong, so check the paper.

Read the paper

Related studies

Go deeper in Evidence Hub

Evidence Hub adds a study data sheet (design, sample size, evidence level, key numbers), an AI summary and a chat grounded in the paper's text.

Open this study Sign up free