TL;DR · 30-second read
The Short Version
A cybersecurity company called Cyware is teaming up with WaterISAC, the group that helps American water utilities warn each other about hackers.
The goal is simple: when one water system spots an attack, the warning should reach the others fast, including thousands of tiny rural systems with little or no security staff.
Why it matters beyond your tap: many of the huge computer buildings that power artificial intelligence rely on the local water supply to stay cool and to fight fires. If the local water plant is hacked, those buildings are exposed too. No price or timeline was announced.
Cyware announced on Sept. 30, 2026, in a release distributed via PR Newswire, a partnership with WaterISAC, the information-sharing organization for the US water sector. Under the arrangement, WaterISAC will use Cyware’s threat intelligence platform to collect, enrich and distribute cyber threat data and vulnerability alerts to water and wastewater utilities.
WaterISAC said its existing partnership with the National Rural Water Association already lets it serve more than 20,000 of the sector’s smallest utilities, and that Cyware was selected after an evaluation of available platforms. No financial terms, contract length or rollout schedule were disclosed.
Executive Summary
WaterISAC, the hub through which US water utilities, security experts and government partners share threat warnings, is moving its intelligence work onto Cyware’s platform. The stated aim is to replace manual processes for gathering and enriching threat data with automation, so that alerts reach members faster and larger utilities can receive intelligence directly.
The deal matters because the US water sector is extraordinarily fragmented. The release counts more than 50,000 utilities, many of them small, and argues that each one is a potential point of failure. Collective defense, the idea that a threat seen by one member protects all of them, only works if warnings reach the weakest participants in a form they can act on.
For data center operators, the announcement is a reminder that a facility’s physical resilience depends on infrastructure it does not control. Cooling systems that draw on municipal water, and fire-suppression systems fed by the local supply, inherit the cyber posture of whichever utility serves the site.
Why a Water-Sector Deal Belongs on a Data Center Risk Register
Data center resilience planning usually focuses on what sits inside the fence: backup generators, redundant cooling loops, dual fiber paths. Water is often treated as a commodity input. But many facilities, especially those using evaporative or other water-based cooling, draw on the local municipal supply, and building fire-suppression systems commonly depend on it as well. The Cyware release itself lists fire suppression alongside drinking water and sanitation as a core function of water systems.
That dependency runs through operational technology, or OT: the control systems that run pumps, valves, chemical dosing and treatment at a water plant. Cyware’s release states that adversaries targeting OT now move at machine speed. If a utility’s controls are disrupted, pressure and supply can be affected for every customer on that system, including a data center campus. The operational conclusion is that the relevant cyber defender for a site’s water is not a national agency or a large vendor, but one of more than 50,000 local utilities, each with its own level of security staffing and maturity.
For operators and developers, that makes the local utility’s cyber posture a legitimate site-selection and resilience input, weighed alongside on-site water storage and cooling design. It also means that sector-wide efforts like WaterISAC’s affect data center risk indirectly: a better-informed local utility is a more dependable upstream supplier.
The Small-Utility Problem Is the Real Test
The most revealing detail in the announcement is structural. WaterISAC says its partnership with the National Rural Water Association already lets it serve more than 20,000 of the smallest utilities. WaterISAC Executive Director Tom Dobbins described the Cyware platform as helping WaterISAC’s analysts deliver more real-time insights to members and letting the organization extend intelligence directly to larger utilities.
Read together, those statements suggest a tiered model: analysts work in the platform, larger utilities may connect directly, and smaller utilities receive curated output. That is a reasonable design, since a rural system with no dedicated security staff cannot ingest a raw threat feed. But it also means the speed gains Cyware describes will be felt most by larger members and by WaterISAC’s own analysts. Whether a warning reaches every participant regardless of size, as Cyware’s Tom Stockmeyer framed the goal, depends on how that last step is handled.
What the AI Claims Establish, and What They Do Not
Cyware positions itself around agentic AI, meaning software that automates steps an analyst would otherwise perform, such as collecting, enriching and routing threat data. The release says this will help WaterISAC significantly reduce manual effort and deliver intelligence more efficiently. Those are plausible benefits for an intelligence team, but the release offers no baseline, no target metrics and no description of how automated outputs are validated before distribution.
It is also worth separating intelligence speed from response speed. A warning delivered in seconds helps only if the recipient can act on it. For a small utility, the bottleneck is often people and budget rather than information. The partnership addresses the information side; the response side remains with each utility. Cyware has also said it is supporting NRECA on Department of Energy-funded research into automated collective defense for electric cooperatives, which places the company across both utility inputs that data centers depend on most: power and water.
Background
The US water sector is unusually fragmented: more than 50,000 utilities, ranging from large metropolitan systems to small rural operations with minimal staff. WaterISAC serves as the sector’s information-sharing hub, one of a family of industry-specific ISACs that pool threat warnings so members can learn from one another. Through its partnership with the National Rural Water Association, WaterISAC says it reaches more than 20,000 of the smallest utilities.
Cyware is a threat intelligence software vendor that unifies intelligence management, sharing and collaboration, and orchestration and automation. It markets itself around agentic AI and collective defense, and counts enterprises, government agencies and ISACs among its customers. The WaterISAC deal extends that ISAC-focused strategy into a sector whose resilience underpins other infrastructure, including data centers that rely on local water for cooling and fire protection. Source: Cyware and WaterISAC Join Forces to Strengthen Water Sector Cyber Defense, Cyware’s Sept. 30, 2026 announcement of its threat intelligence partnership with WaterISAC.Sources