Southern Water confirmed on Monday 12 February 2024 that data from a limited part of its server estate had been stolen and was at risk following an illegal intrusion into its IT systems1. The company said the intrusion arose from its investigation into suspicious activity, as detailed in its statement on 23 January 20241.
The company said its initial assessment is that personal data is at risk for some customers and current and former employees1. Based on forensic investigations that are ongoing, it is notifying in the order of 5 to 10 percent of its customer base that their personal data has been impacted, and is also notifying all current employees and some former employees1. The notifications include security advice, guidance on recommended precautionary steps and details of support, which includes enhanced Experian credit monitoring free of charge for the next 12 months1.
"We have engaged leading independent cybersecurity experts to monitor the “dark web”. They continue to report to us that, since we were named on the cyber criminals’ site on 22 January 2024, they have found no new evidence of the data potentially involved in this cyber incident being published online."
The company said it has been working with Government, its regulators and the National Cyber Security Centre, and has notified the police and the Information Commissioner's Office1. It said its operations and services to customers have not been impacted1. Southern Water said further updates will be posted on its website and social media channels, and that if it has reason to believe a customer's data may be impacted, it will notify them in line with its regulatory obligations1.
Why it matters for households
Households in Southern Water's supply area are affected only if they are among the customers the company is contacting; the company has not published which areas or how many customers in total the 5 to 10 percent figure represents1. Current employees and some former employees are also being notified1. The company states that water operations and services to customers have not been impacted1. Those notified are being given security advice and guidance on recommended precautionary steps by the company, along with 12 months of enhanced Experian credit monitoring, which it says provides active monitoring that can detect and help prevent fraudulent misuse of personal information1. Southern Water says it will contact anyone whose data may be impacted1. Households wanting to follow official updates can use the staying informed hub.
What happens next
Southern Water says its forensic investigations are ongoing and that further updates will be posted on its website and social media channels as it knows more1. Its independent cybersecurity experts will continue checking the dark web for as long as is necessary1.
Sources (1)
- Cyber attack, update for customers, southernwater.co.uk
