Federal News
Georgia Warns of Cyberattack Threats Amid Iran Conflict
March 19, 2026
Cybersecurity experts have issued warnings that Georgia, particularly metro Atlanta and critical infrastructure such as Hartsfield-Jackson Atlanta International Airport, faces elevated risks of cyberattacks linked to ongoing conflict with Iran. The FBI has taken enforcement action by seizing the website of the Iran-linked hacker group Handala, which claimed responsibility for recent cyberattacks on U.S. companies including medical technology firm Stryker. These developments underscore the urgency for government agencies and contractors in Georgia to strengthen cybersecurity defenses, especially around critical infrastructure systems and identity management platforms like Microsoft Intune.
- Why this matters: Georgia's critical infrastructure, including electric grids and water treatment plants, is identified as a high-risk target, requiring enhanced cybersecurity procurement and risk mitigation strategies.
- Federal law enforcement and cybersecurity agencies are actively disrupting foreign cyber threat actors, indicating increased government focus and potential funding for cybersecurity initiatives.
- Procurement professionals should prioritize contracts and services that bolster infrastructure cybersecurity, incident response capabilities, and identity access management.
- Vendors offering advanced threat detection, network security, and secure cloud identity solutions may find increased demand in the Georgia region amid heightened threat awareness.
All critical infrastructure in Georgia is a target. We worry very significantly about our electric grids, we worry about the municipal water treatment plant.
— Lisa Soto, Cybersecurity expert
Itβs an important step, as most of Handalaβs work was to publish their work and create the physiological effect of the damage, even if exaggerated. So taking out their websites and channels is hitting them where it matters.
— Gil Messing
Law enforcement authorities determined this domain was used to conduct, facilitate, or support malicious cyber activities on behalf of, or in coordination with, a foreign state actor.
— FBI statement on seized website
Agencies
Federal Bureau of Investigation, Department of Justice, Cybersecurity and Infrastructure Security Agency
Vendors
Stryker