A hacker group linked to Iran has claimed responsibility for a large scale cyberattack targeting key government institutions in Dubai, raising concerns about potential disruptions and data security in the region. The group, known as Handala, announced on April 12 that it had carried out coordinated attacks against three major entities, including the Dubai Courts Department, Dubai Land Department, and Dubai Roads and Transport Authority. According to the group, the operation resulted in significant system disruptions and extensive damage to digital infrastructure, although these claims have not been independently verified and authorities in Dubai have not issued an official response so far.
In its statement, Handala alleged that the attack led to the destruction of six petabytes of data and the extraction of 149 terabytes of what it described as classified information. The group claimed that the data was permanently erased and could not be recovered, suggesting a level of impact that would rank among the most severe cyber incidents reported in recent years if confirmed. It also stated that the breach caused widespread operational disruptions affecting not only the targeted organizations but also broader city functions. The messaging accompanying the claim emphasized the group’s capability to penetrate secure systems, asserting that even highly protected environments were vulnerable to its operations.
The group framed the cyberattack as a retaliatory action tied to geopolitical tensions, specifically criticizing the United Arab Emirates for its stance in regional dynamics. In its communication, Handala described the operation as a response to what it called actions against the Resistance Axis, positioning the cyber campaign within a broader narrative of political conflict. The language used suggested that the attack was intended as both a direct strike and a warning to other governments in the region. Handala has previously been associated with cyber operations targeting infrastructure in Israel and Gulf countries, indicating a pattern of activity aligned with regional tensions.
The timing of the claim adds to its significance, as it coincides with ongoing ceasefire discussions taking place in Islamabad and a complex diplomatic environment involving Gulf states, the United States, and Iran. Regional governments are navigating sensitive political relationships, and cyber incidents of this nature can add another layer of strain. While the full extent and authenticity of the reported breach remain unclear, the incident highlights the increasing role of cyber operations in geopolitical conflicts and the potential risks faced by critical infrastructure in highly connected urban environments.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
