Hacker Group Handala Claims Cyberattack on Saudi, Bahrain Steel Plants
AI-generated from multiple sources. Verify before acting on this reporting.
RIYADH — A hacker group identifying itself as Handala claimed Sunday to have penetrated the computer systems of two major steel-making companies in Saudi Arabia and Bahrain, causing complete operational disruption at the facilities.
The group, which describes itself as pro-resistance, said the cyber intrusions were a direct response to recent U.S.-Israeli attacks on steel-making companies in Iran, a member of the so-called Resistance Front. The claim was made in a statement released online shortly after 8:30 p.m. UTC on April 13, 2026.
Handala stated that its operatives had gained access to the industrial control systems of the steel plants, halting production lines and disabling critical manufacturing processes. The group did not specify the names of the targeted companies or the exact nature of the malware used, but emphasized that the disruption was total and immediate.
Steel production is a critical component of the industrial infrastructure in both Saudi Arabia and Bahrain, with major facilities operating in the Eastern Province of Saudi Arabia and the industrial zone of Sitra in Bahrain. The two countries are key members of the Gulf Cooperation Council and maintain strong security ties with the United States.
Saudi and Bahraini officials have not yet publicly confirmed the extent of the damage or the authenticity of the cyberattack. Government spokespeople in both nations declined to comment on the specific incident, citing ongoing investigations into the matter. However, industry sources familiar with the situation reported that production at several major plants had been suspended following the reported breach.
The attack comes amid escalating tensions in the region following a series of strikes on Iranian industrial targets. Iranian officials have previously accused the United States and Israel of targeting civilian infrastructure in retaliation for regional proxy activities. The steel sector has been identified as a strategic target in recent geopolitical exchanges.
Handala has previously been linked to cyber operations targeting Western and Gulf state interests. The group has not been officially designated as a terrorist organization by any major government, though its activities have drawn scrutiny from cybersecurity firms and intelligence agencies.
Cybersecurity experts warn that industrial control systems are increasingly vulnerable to sophisticated attacks, particularly in the energy and manufacturing sectors. The potential for physical damage or long-term operational disruption remains a significant concern for regional authorities.
As of Sunday evening, it was unclear whether the steel plants had begun recovery operations or if the cyber intrusion had been fully contained. Questions remain regarding the group’s capabilities, the potential for further attacks, and the broader implications for regional industrial security.