America’s water infrastructure is increasingly exposed to attackers who can reach industrial controllers directly over the Internet. This deep dive examines PLC compromise, ladder-logic tampering, small-utility risk, and the shrinking gap between cyber intrusion and physical disruption.