Recent cyberattacks on water utilities in several states have underscored the vulnerability of the cyber-physical systems that underpin America's critical infrastructure. As attacks become more frequent, the risks posed by centralized data management are coming into sharper focus.
In 2024, the United States recorded over 859,000 cyberattacks—nearly 100 per hour—with financial losses reaching almost $17 billion, a sharp rise from $2.7 billion in 2018. Of those, nearly 4,900 targeted critical infrastructure that supports the physical and digital economy. Yet it was the May ransomware attack on Canvas, a widely used learning management system for schools and corporate training, that brought the issue home for millions.
Canvas serves K-12 schools, colleges, and universities, and its disruption forced institutions to cancel or postpone coursework, affecting students and educators nationwide. This incident highlighted how a single point of failure in a centralized system can have cascading effects.
Air travel is another prime example. The passenger service system—which handles reservations, seat assignments, and crew scheduling—is highly centralized. This centralization makes air travel more efficient, but also more susceptible to cyberattacks. A 2025 attack on several European airports forced manual processing of travelers, a scenario that would be nearly impossible to sustain in the U.S., where 2.5 to 3 million passengers fly daily. Manual checks would overwhelm the Transportation Security Administration and weaken aviation security.
Even non-malicious disruptions reveal the fragility. In July 2024, a faulty software update from CrowdStrike, a cybersecurity firm, caused widespread outages on Windows systems. Airlines reverted to paper tickets and manual check-ins. Delta Airlines alone estimated losses of around $500 million due to flight cancellations and refunds. This "friendly fire" incident demonstrated that even a routine update can cripple operations when systems are overly centralized.
Other critical sectors face similar risks. The Federal Reserve, though decentralized across 12 regional banks, processes a vast number of financial transactions daily. A compromise in any part of that network could delay payments and slow economic activity. The trade-off between efficiency and vulnerability is a constant challenge for system designers and policymakers.
While centralization offers frequent benefits, rare events can be devastating. As the digital economy grows, so does the need to measure and mitigate these risks. The recent proposal to boost water cybersecurity funding reflects growing concern, but broader action may be needed.
Americans have become accustomed to the convenience of a connected economy, but that convenience comes with hidden costs. Understanding and addressing these vulnerabilities is essential to protecting national security and economic stability.
