Crystal Mountain Inc. supplied drinking water to 4,200 people, missed every federal deadline to assess risks and plan for emergencies, ignored a direct enforcement order, and the EPA let them settle the whole thing for $22,400 ($22,400 is less than the annual cost of health insurance for one American family).

Investigation • Drinking Water Safety • Pacific Northwest

They Controlled Your Water. They Skipped the Safety Plan.

Crystal Mountain Inc. runs a public water system in Enumclaw, Washington. Federal law classified that system as a community water system, which means it serves at least 25 people year-round, it draws from piped infrastructure, and the people who drink from it have no alternative. Crystal Mountain’s system serves approximately 4,200 people. Those people had no idea their water supplier had ignored federal safety mandates for years.

The Safe Drinking Water Act requires water systems of this size to complete two things: a Risk and Resilience Assessment examining threats from terrorism, natural disasters, and infrastructure failure, and an Emergency Response Plan built from those findings. Crystal Mountain missed both federal deadlines. Then it missed a third deadline set by the EPA in a direct enforcement order. It finally paid a $22,400 fine ($22,400 is less than one year of average American rent in a mid-size city) in November 2025 to make the case go away.

The company waived its right to contest the allegations, waived its right to a jury trial, and waived its right to challenge the lawfulness of the final order. At the same time, it formally refused to admit the specific facts underlying those allegations. That legal maneuver, paying and simultaneously denying, is one of the oldest tricks in the corporate playbook.

The Non-Financial Ledger

What 4,200 People Were Never Told

There is an invisible contract between a water utility and the community it serves. The utility controls the pipes, the treatment, the storage, and the entire chain of infrastructure that delivers safe water to every tap, shower, and glass in the region. The people on the other end of those pipes have no alternative. They cannot audit the system. They cannot inspect the tanks. They cannot verify that the company responsible for their water has actually done what federal law requires. They can only trust.

For at least four years, from the federal deadline of June 30, 2021, through the signing of this consent agreement in November 2025, the approximately 4,200 people served by Crystal Mountain’s water system lived under a utility that had never completed a federal risk assessment examining what would happen if their water supply was attacked, contaminated, or knocked out by a natural disaster. The company did not tell them this. The documents do not indicate that customers received any notification of the compliance failure.

The federal law that Crystal Mountain violated, Section 1433 of the Safe Drinking Water Act, exists precisely because drinking water infrastructure is a target. The Risk and Resilience Assessment the company was required to complete includes evaluation of threats from malevolent acts, vulnerabilities in electronic and automated systems including cybersecurity, the physical security of barriers and storage facilities, chemical handling risks, and the resilience of every pipe, pump, and treatment process in the system. Crystal Mountain’s customers were drinking from a system that had never had that analysis done on time.

The Emergency Plan That Never Came

Even after Crystal Mountain finally submitted its Risk and Resilience Assessment in August 2022, under the pressure of an active EPA enforcement order, it still never completed the Emergency Response Plan. That plan is the document that would tell workers, managers, and first responders exactly what to do if something went wrong. It is supposed to contain, by law: strategies and resources to improve physical security and cybersecurity; step-by-step plans for responding to malevolent acts or natural hazards; alternative source water options in case the primary supply is compromised; identification of equipment to keep water flowing during a crisis; and strategies for detecting attacks or disasters before they cause irreversible harm.

None of that exists, at least not in any form that Crystal Mountain ever certified to the federal government. The company completed half the assignment and then stopped. It knew that the EPA’s 2022 enforcement order required completion within six months, and it still did not act. The population that depends on this water system for drinking, cooking, bathing, and fire suppression had no documented emergency plan protecting them.

The people of Enumclaw, Washington, did not choose to live under a utility that skips federal safety mandates. They pay their water bills. They follow the rules. They have no power to demand compliance from a company that controls their water. That is not an abstract policy complaint. That is the specific, concrete reality of 4,200 people whose water supplier decided that emergency preparedness was optional until a federal fine made it slightly less optional.

The Dignity of Being Treated as an Afterthought

There is something worth naming about the way this case resolved. Crystal Mountain paid $22,400 ($22,400 is the equivalent of roughly 15 months of Netflix subscriptions across all 4,200 households it serves, or about $5.33 per person) and signed a document stating it “neither admits nor denies” the factual allegations. That phrase is doing enormous moral work. It lets the company pay without accountability. It lets the settlement close without any public acknowledgment that the utility put 4,200 people in a position of unassessed, unplanned risk for years. The customers who were left without emergency protections receive no apology, no notification, and no explanation in any document produced by this proceeding.

The fine itself sends a message to every other water utility watching this case. The maximum penalty the EPA was authorized to assess was $49,848 ($49,848 is more than the annual median household income in several rural American counties). Crystal Mountain paid less than half of that maximum. The message delivered is precise: miss your deadlines, ignore the enforcement order, and your penalty will be lower than what many Americans pay in a single year of rent.

Legal Receipts

Straight From The Government’s Own Paperwork

Societal Impact Mapping

Public Health: The Risk That Was Never Measured

The federal Risk and Resilience Assessment that Crystal Mountain failed to complete on time covers a specific and sobering checklist of threats. According to the EPA’s consent agreement, the assessment must evaluate: risks from malevolent acts and natural hazards; the resilience of pipes, barriers, source water collection, treatment, storage, and distribution; the security of electronic and automated systems including cybersecurity; monitoring practices; chemical use, storage, and handling; and the financial infrastructure of the system. Crystal Mountain’s customers were connected to a system where none of that analysis had been formally documented and certified within the legally required timeline.

The Emergency Response Plan that Crystal Mountain never completed was supposed to include plans for alternative source water options if the primary supply is compromised, relocation of water intakes, construction of flood protection barriers, and detection strategies for attacks on the system. In a region of Washington state susceptible to seismic activity, flooding, and wildfire, the absence of a documented, federally-certified emergency response framework represents a measurable gap in public health protection for 4,200 people.

Water is not a product people can choose to stop consuming. Every household in Crystal Mountain’s service area, every family cooking dinner, every child drinking from a school fountain connected to this system, every elderly resident with a compromised immune system, depended on infrastructure that operated for years without a certified emergency plan. The health risk may never be fully quantifiable precisely because nothing catastrophic happened. But the absence of a visible disaster does not mean the risk was not real. It means the community got lucky.

Economic Inequality: Who Pays, Who Profits, Who Gets Fined

The fine Crystal Mountain paid, $22,400 ($22,400 is less than one semester of in-state tuition and fees at many public universities), is a rounding error in the economics of running a utility. A company that charges 4,200 people for water service every month collects revenue at a scale that dwarfs this penalty. The EPA was authorized under federal law to assess up to $49,848 ($49,848 could cover a year of groceries for approximately four average American families). The agency chose to settle for 44.9% of its maximum authorized penalty.

The people bearing the actual cost of this failure are the customers. They paid their water bills every month while their supplier operated without a certified emergency response plan. They financed the utility’s operations. They had no mechanism to withhold payment until compliance was achieved, no seat at the table when the EPA negotiated the settlement amount, and no share of the $27,448 in potential penalties the EPA chose not to collect. The regulatory system settled a case on their behalf for less than half the available penalty and handed them zero of it.

This is a textbook example of how corporate accountability gaps function differently depending on wealth. Crystal Mountain Inc. had resources to hire legal representation, negotiate a consent agreement, and write a $22,400 check to close the case. The 4,200 individuals it serves had no equivalent leverage. The system resolved itself financially, the company stayed in business, the water kept flowing, and the people most exposed to the risk of an unprepared utility received no remedy, no compensation, and no guarantee that their utility has now fully addressed the underlying emergency planning failures.

What Now?

Leadership Accountability

The EPA’s consent agreement identifies Crystal Mountain Inc. as the respondent. The document does not name individual executives, officers, or board members. The undersigned representative of Crystal Mountain certified they were “fully authorized to enter into the terms and conditions of this Consent Agreement and to bind Respondent.” Their name does not appear in the publicly available document. The company’s leadership remains: [REDACTED – Not in Source].

Regulatory Bodies With Jurisdiction

• U.S. EPA Region 10 (Seattle) — Primary federal enforcement authority for SDWA Section 1433 violations in Washington State. Contact the Enforcement and Compliance Assurance Division directly.
• Washington State Department of Health — Administers the Public Water Supply Supervision Program in Washington under the SDWA. Has concurrent oversight of Crystal Mountain’s community water system.
• EPA Office of Inspector General — Accepts tips on enforcement decisions, including questions about penalty calculation and whether the public interest was fully served in settlements.
• U.S. EPA National Enforcement and Compliance Assurance — Sets agency-wide policy on how water enforcement penalties are calculated and what factors justify reductions from the maximum.

What You Can Actually Do

If you live in Enumclaw, Washington, or anywhere served by a community water system, you have the right to request your utility’s Risk and Resilience Assessment certification status directly from the EPA. Contact EPA Region 10 in Seattle and ask specifically whether your water system has filed its Section 1433 certifications. Organize with neighbors. Attend your local utility board meetings. Request that your local elected representatives demand transparency from every water supplier in the region. Water is not a commodity. It is a human right, and the infrastructure that delivers it deserves full public accountability, not a $22,400 exit ramp.