An Iranian hacker group is claiming it infiltrated water systems serving several California cities in an apparent act of retaliation against the United States — though cybersecurity experts are casting doubt on whether the hackers can actually do any damage.
The group, known as Handala, alleged Thursday that it breached systems tied to Bakersfield, Visalia and Chico, posting screenshots that appeared to show residents’ water bills. The hackers said the cyberattack was payback after US forces struck two reservoirs in Iran.
“Only two days ago, [Trump] destroyed the water sources of the oppressed people of Sirik with multi-million-dollar rockets, inflicting forced thirst and suffering in 50-degree heat,” Handala said in a statement to Iranian news outlets. “Today, retribution has reached the heart of America.”
Iranian state media reported that the US strikes hit water storage facilities, while a local official said more than 20,000 people lost access to water.
Despite the alarming claims, Handala said it would not shut off water service in California, describing the breach as a warning to President Donald Trump. The group also claimed to possess 5 gigabytes of data allegedly stolen during the intrusion.
California Water Service said it found no evidence that its systems were compromised.
“We have conducted a preliminary scan of our internal IT and OT networks and have no signs of any compromise within our IT, water production, and delivery systems at this time,” a spokesperson for CalWater told news site SJV Water.
An investigation is still underway, the spokesperson said.
Security experts said that there is no evidence or indication Handala actually has the capability to shut off water supplies in America.
“Handala has a record of overstating its capabilities. The boast about choosing to spare the water supply reads as the psychological operation itself,” said Sean Malone, chief information security officer at BeyondTrust.
Still, experts warned that water utilities remain attractive targets for foreign adversaries and cybercriminals.
The allegations are an escalation of America’s ongoing war with Iran. President Trump claimed, however, that the two sides are “scheduled” to sign a peace deal Sunday that forbids Tehran from possessing nukes.
“We look forward to working with Iran, and the entire Middle East, long into the future. Hopefully, this process will all work out quickly, easily, and smoothly. If it doesn’t, we have the ultimate alternative, hopefully never to be used again! Thank you for your attention to this matter!!!” Trump said.