Every year for at least the past decade, there have been multiple cybersecurity incidents at water and wastewater utilities. Impacts have ranged from an annoyance to bringing down the office computer system, preventing bill payments, extracting ransomware payments, and disabling Supervisory Control and Data Acquisition (SCADA) systems. While there have been instances of large utilities being targeted by high profile attackers, most of the publicly known incidents happen to small and medium sized systems that are often less well protected. The biggest threat seems to come from ransomware criminals who see potential profit in every system breached.