UK water giant admits attackers broke into system as gang holds it to ransom