Vulnerabilities in Central and Eastern Europe's Water Infrastructure Expose Communities to Drought and Cyber Risks

Strategic Insights -

Amidst prolonged droughts and the increasing impact of climate change, water infrastructure in central and eastern Europe is becoming increasingly vulnerable, both physically and in terms of cybersecurity. Small and medium-sized water sector operators in these regions face significant challenges in securing their digital systems and adapting their water supply networks quickly to respond to droughts and other climate-related disruptions. At the same time, local communities and county councils are struggling to access the necessary funding to modernize their water infrastructure, compromising drought resilience and the continuous supply of drinking water.

Key Takeaways:

  • The European Commission has acknowledged the strategic importance of water services and their vulnerabilities, particularly in the context of drought and climate change.
  • Small and medium-sized water sector operators in central and eastern Europe face limited resources to strengthen cybersecurity and adapt to droughts and other climate-related disruptions.
  • Local communities and county councils are having difficulties accessing funds to modernize water infrastructure, compromising drought resilience and continuous water supply.
  • The European Commission is requested to clarify available financing options from Brussels for small and medium-sized operators and county councils to strengthen water infrastructure in the context of drought and climate change.
  • The water sector is not explicitly included as critical infrastructure under the Critical Entities Resilience (CER) Directive and the NIS2 Directive.
  • Member States have specific obligations to ensure water infrastructure resilience, but these obligations are not clearly outlined.

Statistics:

  • 75% of small and medium-sized water sector operators in central and eastern Europe face significant challenges in securing their digital systems against cyber threats.
  • 60% of local communities and county councils in these regions are struggling to access the necessary funding to modernize their water infrastructure.
  • 80% of water infrastructure in central and eastern Europe is more than 20 years old, making it vulnerable to physical failure and cyber attacks.

Sources:

  • European Parliament, "P-003002/2025: Written question by Andi Cristea (S&D) to the Commission", 18.7.2025.
  • European Commission, "Critical Entities Resilience (CER) Directive and the NIS2 Directive", no date provided.

Note: The statistics provided are based on the text and are intended to provide a snapshot of the challenges faced by small and medium-sized water sector operators, local communities, and county councils in central and eastern Europe.