Iran-linked hacktivist group Handala claims to have exfiltrated approximately 5 GB of data from California Water Service Company (Cal Water) customer billing systems and an RTKBase GNSS geospatial platform. The claim is unverified by Cal Water or CISA at time of publication. For water and utility sector defenders, the incident highlights billing system and geospatial infrastructure as specific attack surfaces, and RTKBase’s presence in utility environments represents an undermonitored open-source component requiring explicit inventory and access control review.