Cal Water Investigates Handala’s Data-Theft Claim

Summary
Handala claimed it stole 5 GB of data from Cal Water. Dataminr reported personal information in the leak and apparent access to a billing database and internal application. Cal Water is investigating and reports no known operational disruptions.
Key points
- Iran-linked threat actor Handala claimed it stole 5 GB of files from California Water Service.
- Dataminr reported that the leaked files included personal information and that a customer billing database and internal RTKBase application were apparently compromised.
- Cal Water said it activated its cybersecurity response plan and is investigating with state and federal partners and external experts.
- The utility’s preliminary findings indicate no known operational disruptions to its water, wastewater, or billing systems.
- The reported data theft and system access remain claims under investigation; the article provides no independent confirmation of the incident.
Article Details
- Victim Organization
- California Water Service (Cal Water)
- Incident Type
- Alleged data theft and leak following a cyberattack
- Data Types Exposed
- Personal information, reportedly included in leaked data
- Customer billing data, reportedly from a compromised database
- Affected Data Size
- Handala published 5 GB of files allegedly stolen from Cal Water.
- Operational Impact
- Cal Water said preliminary findings showed no known operational disruptions to its water and wastewater systems, including the billing platform. Handala claimed it could have disrupted the water supply but said it chose not to.
- Ransom Or Extortion
- Handala published files it alleged were stolen. No ransom demand was reported.
- Claim Status
- claimed
Threat Actors
Products
Countries
IranCalifornia Water Service (Cal Water) is investigating recent hacking claims by the Iran-linked threat actor Handala, which published several gigabytes of data it allegedly stole from the utility’s systems.United StatesCal Water, one of the largest investor-owned water utilities in the United States, was apparently targeted by Handala in retaliation for the US’s recent attacks on Iran.
