Poland's ABW disclosed ICS breaches at five water treatment plants using default passwords. The US EPA found 70% of American water utilities fail basic cybersecurity standards.