Iranian Cyber Group Handala Claims Cal Water Hack

▤ Summary

A Iran-linked hacking group claims it breached California Water Service and leaked 5 gigabytes of stolen data. The incident appears to involve the utility’s RTKBase GNSS platform and a customer billing system. Dataminr says the attacker likely used the RTKBase instance as the initial entry point before moving laterally into billing. The leak reportedly includes customer PII, administrative credentials, and network access details across multiple districts. The disclosure creates immediate pressure to rotate credentials, audit exposed systems, and review segmentation and logs.

▦ Linked Companies

Dataminr

$100M to $250M