'Elevated' risk of hackers targeting UK drinking water, says credit agency