American Water, the largest water utility in the U.S., disclosed that it had been hit by a cyberattack.
The Camden, New Jersey-based company said in a security statement on its website that it had learned of “unauthorized activity in our computer networks and systems” last Thursday, which it determined “to be the result of a cybersecurity incident.”
The company said on Tuesday that it shut down its customer service portal, and as a result, its billing function “until further notice” and will not charge any late fees or other fees related to billing as long as the system is down.
Some recent hacks of major U.S. companies have brought key online systems to a halt and created chaos for consumers and businesses, such as the hack of UnitedHealth which led to nationwide difficulty among patients needs prescriptions filled and health-care professionals needing to be paid for services.
Hacks targeting U.S. water infrastructure, in particular, have been increasing, with some of the attacks linked to geopolitical rivals of the U.S., including Iran, Russia and China.
Taking out critical national infrastructure has become a top priority for foreign-linked cybercriminals. “All drinking water and wastewater systems are at risk — large and small, urban and rural,” an EPA spokesman recently told CNBC.
American Water provides drinking water and wastewater services to more than 14 million people with regulated operations in 14 states and on 18 military installations.
One recent Russian-linked hack in January of a water filtration plant in a small Texas town, Muleshoe was located near a U.S. Air Force base. “Water is among the least mature in terms of security,” Adam Isles, head of cybersecurity practice for Chertoff Group, recently told CNBC.
The FBI warned Congress in February that Chinese hackers had penetrated deeply into United States’ cyber infrastructure in an attempt to cause damage, targeting water treatment plans, the electrical grid, transportation systems and other critical infrastructure.
America Water said it remains early in the investigation and “currently believes” that no water or wastewater facilities or operations have been impacted and water remains safe to drink.
Law enforcement and third-party cybersecurity experts are now involved, the company said.
American Water did not immediately respond to a request for additional comment.
The rising cybercrime wave targeting key water infrastructure led the Environmental Protection Agency to issue an enforcement alert warning that 70% of water systems it inspected do not fully comply with requirements in the Safe Drinking Water Act. Without quantifying an exact number, the EPA said some have “alarming cybersecurity vulnerabilities” — default passwords that have not been updated, vulnerable single login setups and former employees who retained systems access.
American Water said it first learned of the unauthorized computer access on October 3, and was subsequently able to determine it was a cyberattack. It said turning off customer systems was intended to protect data, though it added that it is too soon to know whether any customer information is at risk.
An American Water spokesman declined to comment beyond the official security statement.
TikTok CEO Shou Zi Chew told employees on Thursday that the company’s U.S. operations will be housed in a new joint venture.
The entity is named TikTok USDS Joint Venture LLC, according to a memo sent by Chew and obtained by CNBC. As part of the joint venture, Chew said the company has signed agreements with the three managing investors: Oracle, Silver Lake, and Abu Dhabi-based MGX. He said that the deal’s “closing date” is Jan. 22.
Under a national security law, which the Supreme Court upheld in January, China-based ByteDance was required to divest TikTok’s U.S. operations or face an effective ban in the country. In September, President Donald Trump signed an executive order approving a proposed deal that would keep TikTok operational in the U.S. by meeting the requirements of a law originally signed by former President Joe Biden.
Chew noted that the new TikTok joint venture would be “majority owned by American investors, governed by a new seven-member majority-American board of directors, and subject to terms that protect Americans’ data and U.S. national security.”
The U.S. joint venture will be 50% held by a consortium of new investors, including Oracle, Silver Lake and MGX with 15% each. Just over 30% will be held by affiliates of certain existing investors of ByteDance, and 19.9% will be retained by ByteDance, the memo said.
The TikTok chief said the entity will be responsible for protecting U.S. data, ensuring the security of its prized algorithm, content moderation and “software assurance.” He added that the joint venture will “have the exclusive right and authority to provide assurances that content, software, and data for American users is secure.”
In addition to being an investor, Oracle will serve as the “trusted security partner” in charge of auditing and validating that it complies with “agreed upon National Security Terms,” the memo said. Sensitive U.S. data will be stored in Oracle’s U.S.-based cloud computing data centers, Chew wrote.
The new TikTok entity will also be tasked with retraining the video app’s core content recommendation algorithm “on U.S. user data to ensure the content feed is free from outside manipulation,” the memo said.
Chew noted that TikTok global U.S. entities “will manage global product interoperability and certain commercial activities, including e-commerce, advertising, and marketing.”
Under Trump’s executive order in September, the attorney general was blocked from enforcing the national security law for a 120-day period in order to “permit the contemplated divestiture to be completed,” allowing the deal to finalize by Jan 23.
The VC arms of Google and Nvidia have invested in Swedish vibe coding startup Lovable’s $330 million Series B at a $6.6 billion valuation, the company announced on Thursday.
The news confirms an earlier story from CNBC, which reported on Tuesday that Lovable had raised at that valuation, trebling its valuation from its previous round in July, and that the investors included U.S. VC firms Accel and Khosla Ventures.
CapitalG, one of Google’s VC divisions, and Menlo Ventures led the round. Alongside Accel and Khosla, Nvidia venture arm NVentures, actor Gwyneth Paltrow’s VC firm Kinship Ventures, Salesforce Ventures, Databricks Ventures, Atlassian Ventures, T.Capital, Hubspot Ventures, DST Global, EQT Global, Creandum and Evantic also participated.
The fresh funds take Lovable’s total raised in 2025 to over $500 million.
“Lovable has done something rare: built a product that enterprises and founders both love,” said Laela Sturdy, managing partner at CapitalG in a statement accompanying the announcement.
“The demand we’re seeing from Fortune 500 companies signals a fundamental shift in how software gets built.”
Lovable’s platform uses AI models from providers like OpenAI and Anthropic to help users build apps and websites using text prompts, without technical knowledge of coding.
The startup reported $200 million in annual recurring revenue (ARR) in November, just under a year after achieving $1 million in ARR for the first time. It was founded in 2023 by Anton Osika and Fabian Hedin.
Vibe coding startups have seen big interest from VCs in recent times, as investors bet on their promise of drastically reducing the time it takes to create software and apps.
In the U.S., Anysphere, which created coding tool Cursor, raised $2.3 billion at a $29.3 billion valuation in November. In September, Replit hit a $3 billion price tag after picking up $250 million and Vercel closed a $300 million round at a $9.3 billion valuation.
During an earnings call with analysts, Micron, which makes memory storage used for computers and artificial intelligence servers, said data center needs have fueled greater demand for its products.
Micron said it expects the total addressable market for high-bandwidth memory to hit $100 billion by 2028, growing at a 40% compounded annual growth rate. Management also upped its capital expenditures guidance to $20 billion from $18 billion.
“We are more than sold out,” said business chief Sumit Sadana. “We have a significant amount of unmet demand in our models and this is just consistent with an environment where the demand is substantially higher than supply for the foreseeable future.
Micron topped Wall Street estimates for the fiscal first quarter and issued blowout guidance.
Read more CNBC tech news
The company reported adjusted earnings of $4.78 per share on $13.64 billion in revenue, surpassing LSEG estimates for earnings of $3.95 per share and $12.84 billion in sales.
Revenues in the current quarter are expected to hit about $18.70 billion, blowing past the $14.20 billion expected by LSEG. Adjusted earnings are forecast to reach $8.42, versus expectations of $4.78 per share.
JPMorgan upped its price target on the stock following the results, citing the favorable pricing setup, while Bank of America upgraded shares to a buy rating.
Morgan Stanley called the results the best revenue and net income upside in the “history of the U.S. semis industry” outside of Nvidia.
“If AI keeps growing as we expect, we believe that the next 12 months are going to have broader coat tails to the AI trade than just the processor names and memory would be the biggest beneficiary,” analysts wrote.