US authorities are investigating a data breach at a small maker of water utility technology, highlighting infrastructure cybersecurity threats, even though the Kansas firm was apparently not part of a suspected Iranian-affiliated campaign against water plants in Minnesota and other states that began in July.