Iranian Cyber Group Handala Claims Cal Water Hack

**Executive summary:** Iran-linked threat actor Handala claims to have hacked Cal Water’s Chico District and published ~5 GB of data, including customer billing records and administrative credentials for the RTKBase GNSS platform; intelligence suggests the RTKBase instance may have been used to pivot into billing systems, exposing PII, credentials, and potential access to operational infrastructure, although OT disruption has not been confirmed.