Skip to main content
See every side of every news story

Handala Says It Exposed 50 Israeli Unit 9900 Officers

Iran

Raphael Satter/Reuters

Raphael Satter/Reuters

What Happened

Handala, an Iran-linked hacker collective, said on Saturday it published personal details of 50 senior officers from Israel's Unit 9900, posting names, ID numbers and locations and saying the leak ended the unit's 'myth of invincibility.' It accompanied the release with warnings of further action.

Why It Matters

Exposing 50 senior Unit 9900 officers immediately endangers personnel and families and risks degrading the unit's intelligence and strike‑support capabilities, weakening operational security. With U.S. officials tying Handala to Iran's intelligence services and the group issuing threats, the leak will likely spur immediate countermeasures and raise near-term cyber and diplomatic escalation risks.

What Happened

Handala, an Iran-linked hacker collective, said on Saturday it published personal details of 50 senior officers from Israel's Unit 9900, posting names, ID numbers and locations and saying the leak ended the unit's 'myth of invincibility.' It accompanied the release with warnings of further action.

Why It Matters

Exposing 50 senior Unit 9900 officers immediately endangers personnel and families and risks degrading the unit's intelligence and strike‑support capabilities, weakening operational security. With U.S. officials tying Handala to Iran's intelligence services and the group issuing threats, the leak will likely spur immediate countermeasures and raise near-term cyber and diplomatic escalation risks.

Where Right Sources Focus

  • Israeli Unit 9900 Doxxing: Conservative outlets detail how Handala exposed personal details of 50 senior Unit 9900 officers, framing the leak as ending the 'myth of invincibility' and proving no Israeli intelligence personnel can remain hidden, citing Handala posts and Justice Department reports.
  • Handala's Iranian State Link: Right-leaning sources emphasize Handala operates as a front for Iran’s Ministry of Intelligence and Security (MOIS), using disposable personas for plausible deniability. US prosecutors and security experts link the collective to Iranian state actors, according to Justice Department reports.

What's Largely Absent from Each Side

  • Left sources rarely mention: Left sources rarely mention specific personal threats and the 48-hour ultimatum issued against Lockheed Martin engineers’ families. Right outlets prominently feature these details, including claims of US 'associates' visiting homes if engineers didn't leave Israel.
  • Center sources rarely mention: Center coverage largely omits the operational civilian impact of Handala's Stryker malware attack, which disrupted hospital operations and forced postponed surgeries across multiple countries. Right-leaning sources emphasize this significant disruption to US healthcare infrastructure.

Timeline

March 27, 2026

FBI Director's Email Breached: U.S. law enforcement confirmed on March 27, 2026 that Handala had compromised FBI Director Kash Patel's personal email and published photographs and other documents online, a breach the group touted publicly.

March 19, 2026

U.S. Seizes Handala Domains: On March 19, 2026, the Justice Department said it seized four domains used by Iran's MOIS, including sites linked to Handala, though the group quickly rebuilt infrastructure.

March 2026

Mass Doxxing and Threats Issued: Handala published alleged PII for 28 Lockheed Martin engineers in Israel and announced it had released personal details for 50 senior officers from Unit 9900, pairing the leaks with a 48-hour ultimatum and threats against engineers' families.

Summaries by Ground AI

Sources

See All 9
View All Sources

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal