Whoops. I feel a bit foolish. I seem to have mixed up something. I looked at a bunch of poisons and I must have mixed up the numbers for cyanide (which comes out to about 15 tons) and Batrachotoxin. Not sure now which one was the 228 tons. In any case, batrachotoxin is still not very realistic. I brought it up because it was the deadliest poison by mass I could find. 15 tons was an absolutely ridiculous amount of the poison. 15 kilograms is still an unrealistic amount to obtain considering that you have to get it from wild-captured frogs in tiny amounts. Aside from that, I don't think it's actually water soluble, and I'm not sure whether it's as lethal taken orally. Then there's the fact that the vast majority of people don't drink a liter of water all at once. They take a sip and, if there's a potent, instantaneous poison, they notice it instantaneously. It's still a serious potential health issue, as you say, but far less than a lethal dose, at which point they call emergency services. After a few such calls, someone hopefully realizes what's going on and has the city water supply shut down and sends out a warning through every available emergency channel. That's a fatal flaw with many possible poisons.
Someone suggested Ricin in another post but, taken orally, that would require nearly ten tons in the water supply to be lethal. Overall, the poisoning plan seems to be less effective than getting a bunch of henchmen to just shoot up the town with conventional weapons.