a pro-iran group called handala accessed customer billing data of cal water, one of the largest us investor-owned water utilities, via an exposed gps tool and published a 5gb proof-of-concept dump exposing about 2 million customer records. targeting a water utility's billing systems, and publicizing it, is a deliberate signaling move beyond simple data theft.