Lockheed Martin Hacktivist Attack

On March 24, 2026, the Iran-linked hacktivist group Handala claimed responsibility for breaching Lockheed Martin. They alleged theft of 375 terabytes of highly sensitive data, including F-35 aircraft blueprints, internal files, and other classified-adjacent materials. The group demanded over $400 million in ransom and began selectively leaking samples.

Lockheed Martin is one of the world's largest defense contractors and a key supplier to the U.S. military and allies. It has long been a high-priority target for nation-state and hacktivist actors.

Exact initial access vector remains classified. The attack combined data exfiltration with threats of wiper malware deployment. The scale of claimed data (375 TB) suggests deep access into internal repositories.

Handala – Iran-aligned hacktivist group known for destructive attacks and high-profile leaks targeting Western defense and government entities.

Aliases

• Pro-Iran Hacktivist Group

Attribution sources

• Lockheed Martin statements
• Cybersecurity researchers
• BleepingComputer

Countries affected

• United States
• Global

Data types

• Sensitive Defense Documents
• Aircraft Blueprints (alleged F-35)
• Internal Corporate Data

Notable documents

• Alleged F-35 related files

Severe national security implications and potential massive remediation costs.

Public reaction

Major national security alarm in the U.S. and among allies.

Political impact

Heightened tensions and calls for stronger retaliation against Iran-linked cyber actors.

Geopolitical consequences

Escalation in cyber dimension of U.S.-Iran proxy conflicts.

Ongoing U.S. government investigation.

Policy changes

• Increased scrutiny on defense contractor cybersecurity.

Security improvements

• Emergency hardening of networks and air-gapping measures.

Significance

One of the largest claimed thefts of sensitive defense technology data by a hacktivist group in recent years.

Legacy

Set a dangerous precedent for hacktivist groups targeting strategic military contractors.

Publishing organisations

• BleepingComputer
• Defense News
• Reuters

Lockheed Martin working with U.S. government agencies; selective data leaks continue.

Official documents

• Lockheed Martin Statement

References

1. [1]Lockheed Martin official statements
2. [2]BleepingComputer reports
3. [3]Defense industry coverage