The FBI has seized multiple websites used by the Handala hacking group following a cyberattack targeting Stryker, a US-based medical technology company. Authorities said the domains were used to distribute stolen data and support operations linked to the group’s activities.
According to investigators, the seized sites were part of infrastructure used to publish information obtained during cyber intrusions and to communicate with the public. The action was carried out as part of an effort to disrupt the group’s ability to release data and continue related campaigns.
The move follows a cyberattack on Stryker that caused widespread disruption to the company’s systems. The incident affected internal networks and devices, with reports indicating that tens of thousands of systems were impacted. The attack has been linked to Handala, a group associated with Iranian state-aligned activity, which claimed responsibility and said it carried out a destructive operation against the company’s infrastructure.
Authorities said the domains were also used as part of a broader effort to publish sensitive information and increase pressure on targets. In some cases, such sites have been used to release selected data obtained during breaches.
Officials stated that seizing the domains removes access to platforms used to host and distribute stolen information. The action also allows law enforcement to collect evidence related to the operation and identify individuals involved.
The cyberattack on Stryker began in March and disrupted operations across multiple regions, affecting access to systems used for communication and business processes. The company said it has been working to restore services and investigate the incident with external cybersecurity experts.
The investigation into Handala’s activities is ongoing, with authorities focusing on both the technical aspects of the intrusion and the infrastructure used to support it. Law enforcement agencies said further actions may follow as part of efforts to limit the group’s ability to conduct similar operations.