LOWPhishing
Global

Hackers Hid Inside Major UK Water Utility for Nearly 2 Years

·Source: Bank Info Security

Updated:

Executive Summary

ICO Warns Key Security Gaps Led to Exposed Data of Over 630,000 People A British regulator said a major water sector organization failed to use establish cybersecurity safeguards to secure sensitive data, allowin

Analysis

ICO Warns Key Security Gaps Led to Exposed Data of Over 630,000 People A British regulator said a major water sector organization failed to use establish cybersecurity safeguards to secure sensitive data, allowing hackers to use a phishing campaign to gain persistence, steal records and expose more than 630,000 sensitive records.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/hackers-hid-inside-major-uk-water-utility-for-nearly-2-years-image_small-10-a-31656.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on May 12, 2026.

Related Threats

CRITICALPhishing

Universal Robots Polyscope 5

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-134-17.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code.</strong></p> <p>The following versions of Universal Robots Polyscope 5 are affected:</p> <ul> <li>Polyscope 5 <5.25.1&

CVE-2026-8153
CISA Advisories
MEDIUMPhishing

Signal adds security warnings for social engineering, phishing attacks

Signal has introduced new in-app confirmations and warning messages as additional safeguards against phishing and social engineering attempts that could lead to various forms of fraud. [...]

BleepingComputer
CRITICALPhishing

Fuji Electric Tellus

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-132-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could allow an attacker to elevate privileges from user to system, which may then enable the attacker to cause a temporary denial of service, open files, or delete files.</strong></p> <p>T

CVE-2026-8108
CISA Advisories