We were informed by one of our customers on a support contract with us that they had received an email from Southern Water informing with the subject ‘Cyber attack: important information about your personal data’.
Further info on the incident:
https://www.bbc.co.uk/news/uk-england-kent-68284475
Our Advice:
We helped our client to immediately change their password for their Southern Water account and also for any other accounts that share the same or similar passwords. We also ensured that MFA was enabled for their accounts. This is because the first thing that malicious actors do once they have credentials for one of your accounts is use them to see what else they can gain access to, usually targeting high-value accounts like online banking. We also advised that they may benefit from contacting the bank that provides their business account and letting them know of the incident.