Cyberattacks on US water systems by Iran are unprecedented in scale (nearly 40 systems in two states alone), involve theft of industrial control project files for disruption, and are amplified by AI lowering attacker knowledge gaps. The US has catch-up work to do on cybersecurity, implying increased demand for cybersecurity solutions.