Autoridad de Acueductos y Alcantarillados

The Aqueduct and Sewer Authority, also known as Autoridad de Acueductos y Alcantarillados or AAA, is the primary water utility provider serving Puerto Rico. Its core function involves managing and operating the island's critical water infrastructure, specifically focusing on drinking water supply and wastewater treatment services. This essential public service ensures the delivery of potable water to residents and businesses across the territory while also handling sewage collection and processing. As the principal water authority for Puerto Rico, AAA holds a vital role in public health, environmental protection, and community sanitation throughout the island. The organization operates under Puerto Rican jurisdiction, functioning as a public utility entity responsible for this fundamental infrastructure sector.

In March 2023, AAA experienced a significant cybersecurity incident impacting its operational technology. On March 13th, the utility suffered a ransomware attack that specifically targeted its electronic customer service systems, causing disruptions to its operations. The organization's vice president publicly confirmed the compromise, highlighting that the entity's robust internal security systems detected the intrusion and activated protective countermeasures automatically during the event. Despite the operational disruption caused by the attack, AAA officials explicitly stated that no sensitive employee information or customer data was compromised or exfiltrated by the attackers. Furthermore, the authority took a firm stance against capitulating to the attackers' demands, publicly declaring it would not pay any ransom to regain access to its encrypted systems. This incident underscores AAA's critical infrastructure role and the inherent cybersecurity challenges faced by utilities managing essential public services. The organization's response demonstrated its operational resilience and commitment to maintaining service continuity under cyber duress.