American Water has paused billing while it responds to a cyberattack it suffered last week, the Camden-based utility company said Monday.
American Water is the largest regulated water and wastewater utility company in the United States, serving 14 million people in 14 states, including Pennsylvania and New Jersey, and at 18 military installations. The company said it found unauthorized activity in its computer network Thursday and determined it was a cybersecurity breach.
MORE: Curtis Bashaw, U.S. Senate candidate in N.J., says he froze during debate because he didn't eat enough
In response, American Water said it immediately notified law enforcement and third-party professionals and shut down its customer portal, MyWater. Though billing is paused until further notice, the company said there will be no late charges or shutoffs in the interim. Its call center has limited functionality.
American Water does not believe any of its facilities or operations were negatively impacted by the attack, according to a Securities and Exchange Commission filing.
After learning of the attack, American Water said it immediately took steps to contain the attack and investigate its cause and the extent of damage. The company hasn't said who is responsible for the attack.
"This investigation is ongoing and will take time to complete," American Water said in a statement. "We take the cybersecurity of our systems with utmost seriousness and are taking additional steps to strengthen the cybersecurity of American Water's systems. Our customers and the data we maintain remain our highest priorities."