Iranian-Linked Handala Hack Team Leaks US Marine Data

The Handala Hack Team, a pro-Iran cyber group linked to Iran's Ministry of Intelligence and Security, released the personal details of 2,379 U.S. Marine Corps personnel stationed in the Persian Gulf. The group shared identifying information via Telegram and sent threatening WhatsApp messages to service members in Bahrain, claiming they are under surveillance and will be targeted by Shahed drones and Kheibar and Ghadeer missiles. Handala cited retaliation for military operations in Gaza and a strike on a primary school in Minab, Iran, as motivations for the attack.

The group asserted that the leak is a limited sample of a larger cache containing home addresses, family details, and daily routines of tens of thousands of American military personnel. While the Pentagon and the Naval Criminal Investigative Service are investigating the authenticity of the breach, initial findings confirmed some released names belong to military members. However, parallel analysis by Straight Arrow indicated that some published data contained invalid or incomplete information.

In response, the United States Department of Justice previously identified Handala as an Iranian front and seized four of its web domains. Secretary of the Navy John C. Phelan advised sailors to secure their phones and social media accounts against social engineering and phishing campaigns. President Donald Trump commented on the broader situation, characterizing Iran as being in a state of collapse.