Rancho Cucamonga Water District Ransomware Attack

January 5, 2026

INCIDENT

An investigation and victim research is finally over and the Rancho Cucamonga, CA-based Cucamonga Valley Water District (CVWD) is informing victims of a ransomware attack the organizations suffered last July.
The Cucamonga Valley Water District discovered the attack on August 15, 2024, that started on July 31. The attack impacted their phone systems and online payment processing. While water service did not end up affected because it operates on a separate network, the attack disrupted their ability to process payments made over the phone, according to the district.
“Upon discovery of ransomware, CVWD immediately engaged third-party specialists and notified federal law enforcement,” the company said in a December update. “CVWD had in place robust software and systems that were able to immediately identify the intrusion and allowed us to react quickly to restore phone and payment systems within days. Within weeks, all systems were fully restored. CVWD did not pay a ransom.”

Incident Date

July 31, 2024

Estimated Cost

Unknown at this time

Type of Malware

Threat Source

No threat source identified