Cybersecurity & Privacy — 2026-03-20

FBI Seizes Handala Hacktivist Sites After 80,000-Device Stryker Wipe Attack

FBI seized two Handala hacktivist websites following the group's destructive wipe of ~80,000 Stryker devices via compromised Microsoft Intune admin access. Handala claimed 50TB of stolen data and framed the attack as retaliation for the Minab school strike. CISA issued an advisory urging all organizations to harden Intune configurations immediately.

Analysis
Prior INTSUM (Mar 19) reported Handala wiping 200,000 Stryker devices. The FBI site seizure represents the US government's first offensive response to Iran-aligned hacktivist activity during the conflict. The actual device count has been refined to ~80,000.

View in full brief →

UNCLASSIFIED // OPEN SOURCE