To the people who keep the water running.
Illustrative scenario
3:14 a.m.
The pump station sits at the edge of town, behind a chain-link fence and a padlock. Nobody has been inside since Tuesday. Nobody needs to. A small computer runs it. It has run it for eleven years.
Tonight that computer gets a command it has never seen before.
The pumps keep humming. No siren. No smoke. Nothing a passing police car would notice. But by sunrise, someone in that town will need three answers. Is the water still flowing? Do the alarms still work? Does our operator still have control?
Many towns can't answer those questions fast. Their people are good. Their budgets are thin. And their pumps, valves, and tanks are spread across miles of quiet roads, each one watched by a screen that someone, somewhere, can reach.
Water is different from everything else in this series. You can delay a shipment. You can reschedule a surgery. You can't pause clean water. Water has no undo button.
In the summer of 2026, that stopped being a thought experiment. In one night, attackers reached more than 30 community water systems in a single state. Within days, the FBI and EPA warned that utilities in at least seven states had been hit. Some towns ran their plants by hand. Some issued boil-water notices.12
This book is not about who did it. People are still arguing about that, and I'll leave the arguing to them. This book is about what a utility can do on its own equipment, starting tomorrow morning.
One promise before we start. I'll always tell you what kind of evidence you're reading. Observed means we saw it ourselves in a NetOps IQ engagement, with the customer's name removed. A small number after a sentence means independent evidence, and the source is in the notes at the back. Illustrative means an example built to show how something works, like the pump station above.
Let's go find out who's really watching your pumps.
Eldad Matityahu Founder and CEO, NetOps IQ