Originally Published 5/21/2026
From May 18–20, 2026, Cyber Florida, in partnership with the Army Cyber Institute and a broad coalition of federal, state, local, military, academic, and private-sector partners, successfully completed the Jack Voltaic® Tampa Cyber Incident Exercise at the University of South Florida Marshall Student Center.
The three-day, immersive exercise simulated a coordinated cyberattack targeting Tampa Bay’s critical water infrastructure, creating cascading impacts across essential services and adjacent military operations. The event brought together decision makers and technical responders to test coordination, improve readiness, and strengthen cyber resilience across the region.
Jack Voltaic® is an initiative led by the Army Cyber Institute designed to evaluate and enhance the resilience of communities surrounding U.S. military installations.
Because modern infrastructure systems are deeply interconnected, disruptions in cyber-physical systems, such as water, energy, transportation, and communications, can quickly ripple across both civilian and defense environments.
Since its launch in 2016, the Jack Voltaic® series has focused on:
The 2026 Tampa exercise built on this foundation with an expanded focus on operational execution and cross-sector integration.
Participants worked through a realistic, escalating cyber incident affecting water treatment and distribution systems in the Tampa Bay region. The scenario was designed to reflect the complexity of modern cyberattacks against operational technology (OT) and critical infrastructure environments.
These events created cascading operational challenges for utilities, emergency managers, and defense-supporting infrastructure, requiring coordinated response across multiple jurisdictions.
The exercise successfully met its core objectives:
Participants tested and refined the ability of the Tampa Bay region to respond to a sophisticated, multi-sector cyberattack under realistic operational pressure.
State and local agencies examined response coordination in an environment reflecting concurrent emergency demands and infrastructure disruption.
The Tampa Bay region further established itself as a national leader in cyber incident preparedness and cross-sector collaboration.
The exercise highlighted potential implications for nearby defense installations, including MacDill Air Force Base, as well as U.S. Central Command and U.S. Special Operations Command.
A defining feature of the 2026 exercise was the integration of two complementary training environments: a facilitated tabletop exercise (TTX) and a live-fire cyber range exercise (LFX).
Led in partnership with Norwich University Applied Research Institutes, the tabletop exercise brought together leadership from across sectors to:
Facilitated discussions enabled participants to test assumptions and refine decision-making frameworks under evolving scenario conditions.
The live-fire exercise, powered by SimSpace, provided participants with a realistic cyber range environment where technical teams:
The LFX environment enabled participants to directly translate tabletop decisions into technical execution, reinforcing real-world readiness.
The exercise brought together an extensive coalition of partners, including:
Key infrastructure partners included:
Idaho National Laboratory and the University of South Florida played key roles in supporting scenario design, technical integration, and research-informed facilitation.
Across all three days, participants identified several critical outcomes:
The exercise reinforced the importance of pre-established relationships between government, industry, and military stakeholders in responding to cyber incidents affecting shared infrastructure.
Participants demonstrated improved ability to maintain shared situational awareness across IT and OT environments during rapidly evolving incidents.
The scenario highlighted how disruptions in water systems can cascade into healthcare, energy, and defense operations.
Leadership teams refined strategies for communicating risk, coordinating messaging, and maintaining public trust during cyber disruptions.
Following the exercise, participants contributed to a comprehensive after-action review capturing:
These findings will inform ongoing efforts to strengthen cyber resilience across Florida’s critical infrastructure ecosystem.
The successful completion of the Jack Voltaic® Tampa Cyber Incident Exercise underscored the value of sustained, cross-sector collaboration in addressing today’s evolving cyber threats.
By bringing together civilian leadership, military commands, infrastructure operators, and cybersecurity practitioners in a shared training environment, the exercise strengthened both relationships and operational readiness across the Tampa Bay region.
Cyber Florida and its partners remain committed to advancing this collaborative model, ensuring Florida continues to lead in building resilient, secure, and well-coordinated cyber defense capabilities.
Cyber Florida’s services and resources are available at no charge. To arrange for access to the ARCS Range, visit https://cyberflorida.org/arcs-range/. To explore no-cost cybersecurity training and educational opportunities for all levels of public sector employees, including certification preparation, visit our FirstLine page at https://cyberflorida.org/firstline/. Critical infrastructure organizations interested in completing the Florida Cyber Risk Assessment to access free resources and expert help should visit https://cyberflorida.org/cip/.