CERT24Iran-linked Handala breached a California water utility and exposed data of two million customersLoading data…
CERT24Threat Observatory
Period

Iran-linked Handala breached a California water utility and exposed data of two million customers

On June 11, 2026, the Iran-linked group Handala claimed that it had compromised California Water Service, or Cal Water, and published 5 GB of data as proof. Dataminr’s analysis found that the disclosure included billing data for approximately two million customers and exposed internal RTKBase GNSS infrastructure. No disruption to water treatment, SCADA systems, or chemical dosing has been confirmed.

← Back to intelligence

Iran-linked Handala breached a California water utility and exposed data of two million customers

On June 11, 2026, the Iran-linked group Handala claimed that it had compromised California Water Service, or Cal Water, and published 5 GB of data as proof. Dataminr’s analysis found that the disclosure included billing data for approximately two million customers and exposed internal RTKBase GNSS infrastructure. No disruption to water treatment, SCADA systems, or chemical dosing has been confirmed.