UK water utilities face cyber threats in live ransomware simulation at Infosecurity Europe 2025

Water utilities in the UK are facing growing cyber threats, with recent attacks exposing serious vulnerabilities. To tackle this issue, Semperis will host a live ransomware simulation called Operation 999 during Infosecurity Europe 2025. The event aims to test defences against realistic attacks on critical infrastructure.

The simulation takes place on June 4, 2025, from 16:00 to 18:00 BST at The Good Hotel in London's Royal Victoria Dock. Ethical hacker Rob Shapland will lead the red team, targeting the fictitious company's SCADA systems and identity infrastructure. A blue team of cyber defenders will work to stop the attack in real time.

Recent incidents have shown how exposed the sector is. In March 2023, South Staffordshire Water suffered a breach after attackers exploited unpatched flaws in Siemens SIMATIC PCS 7 systems. A year later, Thames Water faced a similar ransomware attack, this time through vulnerabilities in Schneider Electric's EcoStruxure Geo SCADA Expert. Both cases disrupted operations and raised concerns about security gaps.

Semperis' research highlights the scale of the problem. Their latest study found that 60% of utility operators were hit by cyber-attacks in the past year, with 80% experiencing multiple breaches. Compromised identity systems were the entry point in 81% of cases. Geopolitical tensions have only increased the risks, making critical infrastructure a prime target for attackers.

Infosecurity Europe 2025 runs from June 3 to 5 at ExCel London. Operation 999 will give attendees a firsthand look at how ransomware attacks unfold—and how defences can be strengthened.

The simulation comes as UK water utilities remain under pressure from repeated cyber incidents. By testing responses to real-world attack scenarios, the event seeks to improve resilience in a sector vital to public safety. Semperis and participants will use the findings to reinforce protections against future threats.