Texas Water Utilities Are Joining a Federal Cyber Network. The Plan Is to Take It Nationwide.

Project Watershed 250 launched in San Antonio this week as a six-month pilot to defend Texas water systems, and the White House has said it intends to take the program nationwide. The pilot's design pairs each participating utility with federal agencies, the new Texas Cyber Command, and a roster of private security and AI vendors.

The program is co-led by Governor Greg Abbott and White House National Cyber Director Sean Cairncross, the senior federal official who coordinates U.S. cyber policy from the Executive Office of the President. The partner stack includes the Office of the National Cyber Director (ONCD), the EPA, CISA (the federal agency that tracks threats to critical infrastructure), and Texas's new state-level cyber command. Locally run water systems, the kind that serve towns and rural districts, are the population the program is being wired to.

The "no cost" pitch is the door. Microsoft, Palo Alto Networks, Dragos, Reflection AI, Parsons, Fortinet, and Cloudflare are providing tools and AI services to participating utilities for free, according to the governor's office. Abbott has framed Texas as the country's leader in cyber warfare. The administration's pilot reporting describes the Texas rollout as a template, with a nationwide expansion plan waiting in the wings. For a small utility that cannot afford its own security operation, the offer is real. If widely taken, it also becomes the basis for the national model the administration wants to roll out.

That is the federalization question. Critical-infrastructure experts have warned for years that water systems are the softest target in the country's utility stack. Dragos CEO Robert M. Lee, whose company is one of the participating vendors, has been calling out the gap publicly. The Government Accountability Office has also flagged persistent weaknesses in water and wastewater cybersecurity across the sector. The strongest counterargument to the federalization worry is that participation is voluntary and a utility can walk away. The GAO findings suggest that, for many small operators, the gap between what they can build alone and what the program offers is the real binding constraint.

The state's water supply has been stressed for years, and the rapid expansion of data centers, the buildings where AI training and inference happen, has added a second pull on the same resource. Water is treated as critical infrastructure, essential to daily life and to the data-center buildout the White House has been pushing as part of the country's AI race. Wiring local water systems into a federal cyber network in Texas is therefore also a test of whether the state can keep its water both safe and available under that combined load.

In late July, Minnesota reported that more than 30 community water systems were hit in what officials called a coordinated cyberattack, with utilities in at least seven other states reporting incidents to the FBI. The reported effects, including changed IP addresses and passwords, lost remote monitoring, pressure losses, and flooding, are the kind of operational disruption that does not require a sophisticated actor to cause real damage. That wave is why the administration is moving on a six-month timeline rather than a multi-year procurement.

The administration has said the pilot's success would trigger a national rollout, but has not specified what an opting-out utility would face or how the program's data flows would be governed once the integration is in place. The next concrete read is the program's mid-pilot review.