The Iranian-affiliated hacking group Handala claims to have breached California Water Service's systems, leaking approximately 5 GB of data including personal customer information and internal application data. The group stated it could have disrupted water supply operations but chose not to. Cal Water has activated its cybersecurity response plan and is investigating the claims, reporting no known operational disruptions to critical water and wastewater systems or billing platforms. The utility is working closely with state and federal agencies and external cybersecurity experts. This incident underscores the persistent threat to water sector infrastructure, which often relies on legacy systems vulnerable to cyberattacks.

The leaked data reportedly includes personal information from a customer billing database and internal application data. However, there are no confirmed operational disruptions to water or wastewater systems or the billing platform. The incident may pose privacy risks due to the exposure of personal data, but critical infrastructure operations appear unaffected based on preliminary findings.

Cal Water has activated its cybersecurity response plan and is conducting a thorough investigation in collaboration with government partners and external experts. No operational disruptions have been detected, and the utility maintains multiple cybersecurity and water system security measures. Organizations should monitor official updates from Cal Water and relevant authorities for further guidance. Patch status is not applicable as no specific vulnerability or exploit details have been disclosed. No additional immediate mitigation actions are indicated based on current information.