The bigger risk is not the leaked billing files. An internal GPS correction service can sit close enough to field operations that admin access there becomes a bridge from ordinary IT into the workflows that support water infrastructure.
Dataminr assessed that Handala’s 5 GB haul from California Water Service included billing records, PII, and admin access tied to Cal Water’s internal RTKBase deployment. Cal Water says it sees no operational disruption so far, but the reported RTK setup is used by field crews for centimeter-level positioning across service districts.
If that assessment holds, this is not just a customer-data breach. It shows how a support system built for mapping and positioning can carry operational trust, and that makes internal fleet, GIS, and correction services worth treating as potential lateral paths into OT-adjacent environments.