Rand Water Confirms Cyber Incident Affecting IT Systems

Summary
South Africa’s Rand Water confirmed a cyber incident affecting some IT systems. Water operations and supply remain unaffected; the utility is investigating, and it has not said whether data was accessed.
Key points
- Rand Water disclosed on 3 September that a cybersecurity incident is affecting certain IT systems.
- The utility says water treatment, quality control, and bulk supply operations remain fully operational, with water quality and supply unaffected.
- Treasury operations continue through a disaster recovery environment, and Rand Water says it can meet its debt obligations.
- Internal and external specialists are investigating and managing the incident.
- Rand Water has not identified a suspected attacker, described the attack, said whether data was accessed, or provided a timeline for restoring full system functionality.
- The disclosure was made to holders of Rand Water’s listed debt securities; the utility said it will provide further market updates if material developments arise.
Article Details
- Victim Organization
- Rand Water
- Incident Type
- Cybersecurity incident affecting certain IT systems; the attack type has not been disclosed.
- Disclosure Date
- 2026-09-03
- Operational Impact
- Certain IT systems were affected. Rand Water said critical operations—including water treatment, water quality control, and bulk water supply—remained fully operational. Treasury operations continued through its disaster recovery environment, and the utility said it had no indication of missing funds or impaired debt obligations. Full system functionality restoration timeline was not disclosed.
- Ransom Or Extortion
- No ransom or extortion activity was reported.
- Claim Status
- confirmed
