Fanø Vand

Fanø Vand, also known by its alias, is a water utility headquartered in Denmark. The organisation provides drinking water supply and wastewater treatment services to the community on Fanø island. It operates under the Danish regulatory framework that governs water and wastewater services. Its administrative systems are responsible for handling customer service functions. These systems support the overall delivery of water and wastewater services to residents and businesses.

On March 18, 2024, Fanø Vand experienced a cyberattack that specifically targeted its administrative systems. The intrusion disrupted routine customer service functions, including inquiries and account management. Importantly, the attack did not affect the utility’s water production or wastewater treatment facilities, which continued operating normally. The organisation confirmed that the attackers did not gain access to personally identifiable information stored with external providers. Fanø Vand is actively working to determine what other data, if any, may have been compromised during the incident. Restoration efforts are underway to bring the affected administrative systems back online while verifying that no malicious remnants remain. To address the breach, the utility has reported the incident to the Danish data protection authority and the national cyber security centre. Investigations are being conducted in collaboration with sectorCERT and external cybersecurity partners to identify the attack vector and prevent recurrence. The utility has stated that it will continue to monitor its networks and improve security measures based on the findings of the ongoing review.