Skip to content
OriginalSign in
Image: SecurityWeek

SecurityWeekEduard Kovacs

Handala Claims Data Breach at California Water Utility, No Outage

Part of the Handala story · since 25 Feb

Quiet for 14 weekslast report 28 Jul32 articles9 outlets
25 Feb · DataBreaches first29 Jun10 Aug21 SepNowThis article29th of 32
  • Wed 25 Feb, 21:40 UTC. DataBreaches, first report. Iran linked Handala hacks Clalit, leaks 10,000+ patient files.
  • Wed 11 Mar, 16:49 UTC. SecurityWeek, its first report on the story. MedTech Giant Stryker Crippled by Iran-Linked Hacker Attack.
  • Wed 11 Mar, 20:55 UTC. Security Affairs, its first report on the story. Pro-Palestinian hacktivist group Handala targets Stryker in global disruption.
  • Thu 12 Mar, 09:37 UTC. Infosecurity, its first report on the story. Iran Claim Massive Cyber-Attack on MedTech Firm Stryker.
  • Fri 13 Mar, 08:30 UTC. SOCRadar, its first report on the story. Dark Web Profile: Handala Hack.
  • Wed 18 Mar, 13:08 UTC. SecurityWeek. Iranian Hackers Likely Used Malware-Stolen Credentials in Stryker Breach.
  • Fri 20 Mar, 12:50 UTC. SecurityWeek. US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites.
  • Tue 24 Mar, 09:38 UTC. Infosecurity. Handala Group Tied to Iranian Hack‑and‑Leak Operations, FBI Reveals.
  • Wed 25 Mar, 12:44 UTC. DataBreaches. Handala Hackers Alleges Massive Data Breach of Tamir Pardo, Former Mossad Chief.
  • Sat 28 Mar, 10:50 UTC. Security Affairs. Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account.
  • Sat 28 Mar, 13:58 UTC. DataBreaches. Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account.
  • Sat 28 Mar, 17:06 UTC. The Hacker News, its first report on the story. Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack.
  • Sun 29 Mar, 09:58 UTC. Security Affairs. Security Affairs newsletter Round 569 by Pierluigi Paganini – INTERNATIONAL EDITION.
  • Mon 30 Mar, 10:35 UTC. SOCRadar. Inside Handala’s Hack on the FBI Director.
  • Tue 31 Mar, 14:00 UTC. Ars Technica, its first report on the story. Iran's hackers are on the offensive against the US and Israel.
  • Fri 3 Apr, 09:04 UTC. Security Affairs. Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies.
  • Mon 6 Apr, 23:41 UTC. dti.domaintools.com, its first report on the story. Iran MOIS Links Handala, Karma, Justice in Unified Cyber Ops.
  • Thu 9 Apr, 01:31 UTC. SecurityWeek. Iran Backed Hackers Say Cyberattacks Won't Stop Despite Ceasefire.
  • Thu 9 Apr, 18:40 UTC. Dark Reading, its first report on the story. Handala led Iranian cyber ops.
  • Mon 13 Apr, 10:01 UTC. Security Affairs. Handala alleges UAE data breach, claims massive data loss.
  • Sun 19 Apr, 18:13 UTC. dti.domaintools.com. MOIS linked actors shift from Albania hacks to Israel influence.
  • Wed 29 Apr, 07:21 UTC. SOCRadar. Handala group threatens US troops in Bahrain with missile warnings.
  • Wed 29 Apr, 11:01 UTC. SecurityWeek. Iran linked Handala warns US troops Bahrain on WhatsApp.
  • Thu 7 May, 23:25 UTC. dti.domaintools.com. Fake Google Authenticator Chrome Extension Hits 260k Users.
  • Mon 8 Jun, 13:31 UTC. SOCRadar. Iranian hackers claim cyber strikes on Israeli radar amid tensions.
  • Fri 12 Jun, 12:07 UTC. SecurityWeek. Handala hackers leak 5GB Cal Water data, expose customer PII.
  • Fri 12 Jun, 22:41 UTC. Security Affairs. Handala hackers breach Cal Water, leak 2M customers' data.
  • Sun 14 Jun, 13:30 UTC. Security Affairs. CISA Alerts Oracle PeopleSoft Flaw After California Water Hack.
  • Tue 16 Jun, 12:07 UTC. SecurityWeek. Handala Claims Data Breach at California Water Utility, No Outage. This article, 29th of 32.
  • Thu 25 Jun, 12:31 UTC. SecurityWeek. Handala hack claim against Cal Water yields only minor data leak.
  • Fri 10 Jul, 22:09 UTC. dti.domaintools.com. Pro Iran hacktivists boost DDoS leak attacks amid US tensions.
  • Tue 28 Jul, 12:51 UTC. DataBreaches. Iran Linked Handala Hits US Water Utilities, Warns More Attacks.

California Water Service (Cal Water) is investigating hacking claims made by the Iran-linked group Handala, which alleges to have stolen several gigabytes of data from the utility's systems. The group claimed it could have disrupted water supply operations but chose not to, instead leaking data including personal information from a customer billing database. Cal Water has activated its cybersecurity response plan and is collaborating with state and federal partners to address the situation.

Preliminary findings suggest no operational disruptions to their water systems. The incident highlights ongoing vulnerabilities in the water sector to cyberattacks.

How the story developed

All 32 articles
Quiet for 14 weekslast report 28 Jul32 articles9 outlets

32 articles from 9 outlets since 25 Feb. Quiet since 28 Jul. This was the 29th report, 111 days after the first.

Now25 Feb255152781830112231325First reportDataBreaches · 25 Feb, 21:40This article29th of 32 · day 111Picked up againafter 2 weeks quiet
  • Wed 25 Feb, 21:40 UTC. DataBreaches, first report. Iran linked Handala hacks Clalit, leaks 10,000+ patient files.
  • Wed 11 Mar, 16:49 UTC. SecurityWeek, its first report on the story. MedTech Giant Stryker Crippled by Iran-Linked Hacker Attack.
  • Wed 11 Mar, 20:55 UTC. Security Affairs, its first report on the story. Pro-Palestinian hacktivist group Handala targets Stryker in global disruption.
  • Thu 12 Mar, 09:37 UTC. Infosecurity, its first report on the story. Iran Claim Massive Cyber-Attack on MedTech Firm Stryker.
  • Fri 13 Mar, 08:30 UTC. SOCRadar, its first report on the story. Dark Web Profile: Handala Hack.
  • Wed 18 Mar, 13:08 UTC. SecurityWeek. Iranian Hackers Likely Used Malware-Stolen Credentials in Stryker Breach.
  • Fri 20 Mar, 12:50 UTC. SecurityWeek. US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites.
  • Tue 24 Mar, 09:38 UTC. Infosecurity. Handala Group Tied to Iranian Hack‑and‑Leak Operations, FBI Reveals.
  • Wed 25 Mar, 12:44 UTC. DataBreaches. Handala Hackers Alleges Massive Data Breach of Tamir Pardo, Former Mossad Chief.
  • Sat 28 Mar, 10:50 UTC. Security Affairs. Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account.
  • Sat 28 Mar, 13:58 UTC. DataBreaches. Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account.
  • Sat 28 Mar, 17:06 UTC. The Hacker News, its first report on the story. Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack.
  • Sun 29 Mar, 09:58 UTC. Security Affairs. Security Affairs newsletter Round 569 by Pierluigi Paganini – INTERNATIONAL EDITION.
  • Mon 30 Mar, 10:35 UTC. SOCRadar. Inside Handala’s Hack on the FBI Director.
  • Tue 31 Mar, 14:00 UTC. Ars Technica, its first report on the story. Iran's hackers are on the offensive against the US and Israel.
  • Fri 3 Apr, 09:04 UTC. Security Affairs. Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies.
  • Mon 6 Apr, 23:41 UTC. dti.domaintools.com, its first report on the story. Iran MOIS Links Handala, Karma, Justice in Unified Cyber Ops.
  • Thu 9 Apr, 01:31 UTC. SecurityWeek. Iran Backed Hackers Say Cyberattacks Won't Stop Despite Ceasefire.
  • Thu 9 Apr, 18:40 UTC. Dark Reading, its first report on the story. Handala led Iranian cyber ops.
  • Mon 13 Apr, 10:01 UTC. Security Affairs. Handala alleges UAE data breach, claims massive data loss.
  • Sun 19 Apr, 18:13 UTC. dti.domaintools.com. MOIS linked actors shift from Albania hacks to Israel influence.
  • Wed 29 Apr, 07:21 UTC. SOCRadar. Handala group threatens US troops in Bahrain with missile warnings.
  • Wed 29 Apr, 11:01 UTC. SecurityWeek. Iran linked Handala warns US troops Bahrain on WhatsApp.
  • Thu 7 May, 23:25 UTC. dti.domaintools.com. Fake Google Authenticator Chrome Extension Hits 260k Users.
  • Mon 8 Jun, 13:31 UTC. SOCRadar. Iranian hackers claim cyber strikes on Israeli radar amid tensions.
  • Fri 12 Jun, 12:07 UTC. SecurityWeek. Handala hackers leak 5GB Cal Water data, expose customer PII.
  • Fri 12 Jun, 22:41 UTC. Security Affairs. Handala hackers breach Cal Water, leak 2M customers' data.
  • Sun 14 Jun, 13:30 UTC. Security Affairs. CISA Alerts Oracle PeopleSoft Flaw After California Water Hack.
  • Tue 16 Jun, 12:07 UTC. SecurityWeek. Handala Claims Data Breach at California Water Utility, No Outage. This article, 29th of 32.
  • Thu 25 Jun, 12:31 UTC. SecurityWeek. Handala hack claim against Cal Water yields only minor data leak.
  • Fri 10 Jul, 22:09 UTC. dti.domaintools.com. Pro Iran hacktivists boost DDoS leak attacks amid US tensions.
  • Tue 28 Jul, 12:51 UTC. DataBreaches. Iran Linked Handala Hits US Water Utilities, Warns More Attacks.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 32 articles as a list
  1. Wed 25 FebDay 01
    1. Iran linked Handala hacks Clalit, leaks 10,000+ patient files21:40 · DataBreaches · First report

  2. Quiet for 2 weeks

    Wed 11 MarDay 142
    1. MedTech Giant Stryker Crippled by Iran-Linked Hacker Attack16:49 · SecurityWeek · Picked up again
    2. Pro-Palestinian hacktivist group Handala targets Stryker in global disruption20:55 · Security Affairs
  3. Thu 12 MarDay 151
    1. Iran Claim Massive Cyber-Attack on MedTech Firm Stryker09:37 · Infosecurity
  4. Fri 13 MarDay 161
    1. Dark Web Profile: Handala Hack08:30 · SOCRadar

  5. Quiet for 5 days

    Wed 18 MarDay 211
    1. Iranian Hackers Likely Used Malware-Stolen Credentials in Stryker Breach13:08 · SecurityWeek · Picked up again

  6. Quiet for 2 days

    Fri 20 MarDay 231
    1. US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites12:50 · SecurityWeek

  7. Quiet for 4 days

    Tue 24 MarDay 271
    1. Handala Group Tied to Iranian Hack‑and‑Leak Operations, FBI Reveals09:38 · Infosecurity · Picked up again
  8. Wed 25 MarDay 281
    1. Handala Hackers Alleges Massive Data Breach of Tamir Pardo, Former Mossad Chief12:44 · DataBreaches

  9. Quiet for 3 days

    Sat 28 MarDay 313
    1. Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account10:50 · Security Affairs · Picked up again
    2. Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account13:58 · DataBreaches
    3. Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack17:06 · The Hacker News
  10. Sun 29 MarDay 321
    1. Security Affairs newsletter Round 569 by Pierluigi Paganini – INTERNATIONAL EDITION09:58 · Security Affairs
  11. Mon 30 MarDay 331
    1. Inside Handala’s Hack on the FBI Director10:35 · SOCRadar
  12. Tue 31 MarDay 341
    1. Iran's hackers are on the offensive against the US and Israel14:00 · Ars Technica

  13. Quiet for 3 days

    Fri 3 AprDay 371
    1. Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies09:04 · Security Affairs · Picked up again

  14. Quiet for 4 days

    Mon 6 AprDay 401
    1. Iran MOIS Links Handala, Karma, Justice in Unified Cyber Ops23:41 · dti.domaintools.com · Picked up again

  15. Quiet for 2 days

    Thu 9 AprDay 432
    1. Iran Backed Hackers Say Cyberattacks Won't Stop Despite Ceasefire01:31 · SecurityWeek · Picked up again
    2. Handala led Iranian cyber ops18:40 · Dark Reading

  16. Quiet for 4 days

    Mon 13 AprDay 471
    1. Handala alleges UAE data breach, claims massive data loss10:01 · Security Affairs · Picked up again

  17. Quiet for 6 days

    Sun 19 AprDay 531
    1. MOIS linked actors shift from Albania hacks to Israel influence18:13 · dti.domaintools.com · Picked up again

  18. Quiet for 10 days

    Wed 29 AprDay 632
    1. Handala group threatens US troops in Bahrain with missile warnings07:21 · SOCRadar · Picked up again
    2. Iran linked Handala warns US troops Bahrain on WhatsApp11:01 · SecurityWeek

  19. Quiet for 9 days

    Thu 7 MayDay 711
    1. Fake Google Authenticator Chrome Extension Hits 260k Users23:25 · dti.domaintools.com · Picked up again

  20. Quiet for 5 weeks

    Mon 8 JunDay 1031
    1. Iranian hackers claim cyber strikes on Israeli radar amid tensions13:31 · SOCRadar · Picked up again

  21. Quiet for 4 days

    Fri 12 JunDay 1072
    1. Handala hackers leak 5GB Cal Water data, expose customer PII12:07 · SecurityWeek · Picked up again
    2. Handala hackers breach Cal Water, leak 2M customers' data22:41 · Security Affairs

  22. Quiet for 2 days

    Sun 14 JunDay 1091
    1. CISA Alerts Oracle PeopleSoft Flaw After California Water Hack13:30 · Security Affairs

  23. Quiet for 2 days

    Tue 16 JunDay 1111
    1. Handala Claims Data Breach at California Water Utility, No Outage12:07 · SecurityWeek · This article, 29th of 32

  24. Quiet for 9 days

    Thu 25 JunDay 1201
    1. Handala hack claim against Cal Water yields only minor data leak12:31 · SecurityWeek · Picked up again

  25. Quiet for 2 weeks

    Fri 10 JulDay 1351
    1. Pro Iran hacktivists boost DDoS leak attacks amid US tensions22:09 · dti.domaintools.com · Picked up again

  26. Quiet for 3 weeks

    Tue 28 JulDay 1531
    1. Iran Linked Handala Hits US Water Utilities, Warns More Attacks12:51 · DataBreaches · Picked up again

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in