Iranian Hackers Claim Attack on California Water Utility: What to Know
California Water Service, serving over 2 million people, is investigating claims of a cyberattack by Iranian hackers. Here's what families need to understand.
Source
GetCyberRight Intelligence
Original headline: Iranian Hackers Target California Water Utility
Plain-English summary by GetCyberRight. Read the full report at the source above.
What Happened
California Water Service is investigating claims by Iranian hackers who say they successfully breached the company's computer systems. The utility provides water and wastewater services to more than 2 million Californians across the state. While the company reports no operational disruptions so far, this incident highlights a growing and dangerous trend: nation-state hackers targeting America's critical infrastructure.
The Details
A hacking group claiming ties to Iran announced they had compromised systems at California Water Service (Cal Water). The company operates water systems in numerous California communities, making it one of the largest investor-owned water utilities in the western United States.
Cal Water has publicly stated they're investigating these claims with cybersecurity experts. The good news is that the company reports no evidence of disruption to actual water or wastewater services. The systems that control water treatment, delivery, and safety appear to be functioning normally.
However, investigations like these take time. The full scope of what data or systems may have been accessed isn't always immediately clear. Water utilities store customer information including names, addresses, payment details, and account information that could be valuable to attackers.
Who Is Affected
If you're a California Water Service customer in areas including parts of Los Angeles, the Bay Area, Sacramento region, or other communities they serve, you should pay close attention. More than 2 million people rely on this utility for daily water needs.
But this matters beyond just Cal Water customers. Anyone who receives services from critical infrastructure providers (water, electricity, gas, internet) should understand that these organizations are increasingly targeted. The techniques used in one attack often get replicated against other similar organizations. What happens in California can preview threats elsewhere.
What You Should Do Right Now
Check your Cal Water account for unusual activity. Log into your online account and review recent transactions, address changes, or payment method updates you didn't authorize.
Stay one step ahead of scammers
Weekly cybersecurity briefings for families. No spam, just the threats that matter and what to do about them.
Monitor your bank statements and credit cards used to pay your water bill. Look for unauthorized charges over the next several billing cycles.
Be suspicious of unexpected communications. Scammers often follow data breaches with phishing emails or calls pretending to be from the company. Cal Water won't ask for passwords or payment information via email.
Sign up for account alerts if Cal Water offers them. Enable notifications for bill changes, payment processing, or account modifications.
Keep emergency water supplies on hand. While operational disruption seems unlikely here, having 3-5 days of drinking water stored is smart preparedness for any household.
The Bigger Picture
Attacks on water utilities aren't isolated incidents. Critical infrastructure has become a primary target for nation-state hackers seeking to demonstrate capability, gather intelligence, or establish access for future disruption. We've seen similar attacks on water systems in Pennsylvania, utilities in other states, and infrastructure worldwide. Understanding these threats helps families make informed decisions about preparedness and digital security.
How GetCyberRight Can Help
Our Cyber Threat Radar tool tracks emerging threats targeting critical infrastructure and essential services in real time. It helps families understand which threats are actively developing, which organizations are being targeted, and what protective steps make sense for your household. Staying informed doesn't require technical expertise. It just requires the right resources designed for everyday people.
Curated from trusted cybersecurity sources by GetCyberRight
Source: GetCyberRight IntelligenceStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles
Americans Lost $3.5 Billion to Imposter Scams: What Families Must Know
The FTC reports Americans lost $3.5 billion to imposter scams in 2025. These losses have tripled since 2020, and no one is immune.
3 min readImposter Scams Stole $3.5 Billion in 2025. Here's How to Protect Your Family
Americans lost $3.5 billion to imposter scams in 2025, nearly triple the losses from 2020. AI voice cloning and deepfakes are making these scams dangerously convincing.
4 min readPolice Officers Caught Using Surveillance Cameras to Stalk Private Citizens
Over a dozen officers illegally tracked friends, ex-partners, and family members using automated license plate readers. Here's what families need to know.
3 min readPolice Officers Are Using Surveillance Cameras to Stalk People
More than a dozen officers have illegally used Flock camera systems to track individuals without legitimate reasons. Here's what families need to know.
3 min read