What is confirmed
According to its customer notice reported on 8 September, the attack began overnight on 1 September and encrypted central IT systems.
The utility said water, electricity and other essential services were not interrupted.
What it means
Industrial services can continue while office and customer systems are unavailable; the impacts differ.
Attack notices can be imitated to send fake invoices or replacement bank details.
What to do
Customers: verify any changed payment instruction through a known official channel before paying.
Organisations: separate critical and administrative networks and test restoration procedures.
Check a suspicious sign
Use the related SecurCheck tool, then confirm important decisions with an official source.
