Cyberattack hits water utility