Rand Water Cyberattack Hit IT Systems but Left Water Supply Intact, Raising Broader Concerns

South African bulk water utility Rand Water disclosed a cybersecurity incident on 3 September 2026, affecting certain IT systems including payment software and GIS mapping tools used by contractors to locate underground infrastructure. The utility confirmed that water treatment processes, quality control systems, and monitoring under South Africa's SANS 241 drinking-water standard continued to operate normally throughout the incident. The attacker, attack vector, and whether any data was stolen were not publicly identified by Rand Water. The disclosure was triggered by JSE debt-listing obligations, prompting concerns that similar incidents at other public infrastructure operators may go unreported due to no equivalent legal requirement. The incident follows a pattern of cyberattacks on South African critical infrastructure, including the 2021 ransomware attack on Transnet and a 2024 encryption attack on the South African Bureau of Standards.