handala
First seen May 26, 2024Active175 claimed victims
The claims below are reproduced as posted by handala on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Not a Ransomware Group
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Exposing Israel’s Drone Queen: The Fall of Colonel Haimovich | April 7, 2026 | ransomware_live | — |
| Raz Zimmt’s Chats Leaked to the World | April 6, 2026 | ransomware_live | — |
| Handala Hack Strikes 27 Companies for Minab’s Innocents | April 5, 2026 | ransomware_live | — |
| 50 Senior Unit 9900 Officers Exposed | April 4, 2026 | ransomware_live | — |
| Publication of Photos and Personal Details of IranWire’s Traitorous Members | April 3, 2026 | ransomware_live | — |
| Passover Wiped Clean: 22TB of Data Gone from 14 Companies | April 2, 2026 | ransomware_live | — |
| PSK WIND’s Defense Networks Fall to Handala Hack | April 2, 2026 | ransomware_live | — |
| St. Joseph County | April 1, 2026 | ransomware_live | — |
| IranWire | March 31, 2026 | ransomware_live | — |
| Listen Closely, Gallant: Handala’s Eyes and Ears Are Everywhere | March 29, 2026 | ransomware_live | — |
| 4 Terabytes Wiped—Good Food Store Shut Down After Major Cyberattack | March 28, 2026 | ransomware_live | — |
| North Country Business Products Breached: 2,680 POS Terminals Disabled Nationwide | March 28, 2026 | ransomware_live | — |
| Kash Patel current director of the FBI | March 27, 2026 | ransomware_live | — |
| Lockheed Martin Employees Given 48 Hours to Respond: A Tight Deadline Looms | March 26, 2026 | ransomware_live | — |
| From Hunter to Hunted: Mossad’s Former Chief Falls into the Trap | March 25, 2026 | ransomware_live | — |
| $50M Reward For Trump & Netanyahu | March 24, 2026 | ransomware_live | — |
| Behind the Curtain: Full Details of Shin Bet’s Iran Desk Officers Released | March 23, 2026 | ransomware_live | — |
| The Slightest Aggression: Enemy Infrastructure Reduced to Ashes | March 22, 2026 | ransomware_live | — |
| Architect of Warfare Exposed: Eran Ortal’s Hidden Strategies Now Public | March 21, 2026 | ransomware_live | — |
| Official Statement by Handala Group in Response to Threats from the US and Its Allies | March 20, 2026 | ransomware_live | — |
| Propaganda Chief and Former Mossad Deputy Exposed by Handala Hack | March 20, 2026 | ransomware_live | — |
| Martyr Ali Larijani | March 18, 2026 | ransomware_live | — |
| Mossad’s Secret Treasury Exposed: 50,000 Confidential Emails Leaked | March 17, 2026 | ransomware_live | — |
| Who is VahidOnline? | March 17, 2026 | ransomware_live | — |
| Vahid Offline Members | March 17, 2026 | ransomware_live | — |
| Shock for Israeli Intelligence: 100,000 Classified Emails of Mossad’s Ex-Deputy Director S... | March 16, 2026 | ransomware_live | — |
| Stryker Hit by Unprecedented 12-Petabyte Data Wipe | March 16, 2026 | ransomware_live | — |
| Laura Gilinski | March 15, 2026 | ransomware_live | — |
| No Place to Hide: Senior Navy Officers’ Identities Now Public | March 14, 2026 | ransomware_live | — |
| Hebrew University of Jerusalem | March 13, 2026 | ransomware_live | — |
| Tamir Hayman | March 13, 2026 | ransomware_live | — |
| Raz Zimmt (head of the Iran Desk at Israeli security institutes) | March 12, 2026 | ransomware_live | — |
| Verifone | March 11, 2026 | ransomware_live | — |
| Stryker Corporation | March 11, 2026 | ransomware_live | — |
| Unprecedented Disclosure of 50 Senior Israeli Air Force Officers’ Information | March 9, 2026 | ransomware_live | — |
| Full Access: Jerusalem’s Security Cameras in Handala’s Hands | March 9, 2026 | ransomware_live | — |
| Israeli Weather Stations Crippled | March 8, 2026 | ransomware_live | — |
| Contact Handala | March 8, 2026 | ransomware_live | — |
| Handala New Telegram | March 7, 2026 | ransomware_live | — |
| Jerusalem Water Supply Facilities | March 7, 2026 | ransomware_live | — |
| Sanzer Hasidic community | March 6, 2026 | ransomware_live | — |
| IDF in Farsi | March 6, 2026 | ransomware_live | — |
| Atlas Insurances Ltd | March 5, 2026 | ransomware_live | — |
| Israel Institute for National Security Studies (INSS) | March 4, 2026 | ransomware_live | — |
| Sharjah National Oil Corporation | March 3, 2026 | ransomware_live | — |
| Aramco | March 3, 2026 | ransomware_live | — |
| Israel Opportunity Energy | March 2, 2026 | ransomware_live | — |
| Clalit: Israel’s Largest Healthcare Organization Falls to Cyber Resistance | February 25, 2026 | ransomware_live | — |
| The General in the Shadows: Sapir’s Commander Exposed | February 19, 2026 | ransomware_live | — |
| Handala New Account – Sunset of the lions | January 25, 2026 | ransomware_live | — |
| Ignite Chaos at Your Own Risk: i24 Channel | January 21, 2026 | ransomware_live | — |
| Avraham Hayyim ( Mehrdad Rahimi ) – Mossad Agent | January 18, 2026 | ransomware_live | — |
| The Queen’s Secrets: Unveiling the Mysteries Behind Ayelet Shaked | January 3, 2026 | ransomware_live | — |
| Unveiling the Secrets: Inside the WhatsApp Chats of a Minister | January 3, 2026 | ransomware_live | — |
| 15 SIGINT Agents Exposed — $50,000 Reward | January 3, 2026 | ransomware_live | — |
| Ayelet Shaked Contact List | January 3, 2026 | ransomware_live | — |
| Handala Alert: Amplifying the Voice of Resistance | January 2, 2026 | ransomware_live | — |
| Bibi Gate: The Gatekeeper’s Fall | Tzachi Braverman | December 28, 2025 | ransomware_live | — |
| Braverman Files Unleashed: Every Secret Now Exposed | December 28, 2025 | ransomware_live | — |
| Netanyahu’s Cabinet Awaits Handala’s Next Move | December 27, 2025 | ransomware_live | — |
| No Place to Hide: Unmasking the Masterminds Behind War Drones | December 20, 2025 | ransomware_live | — |
| The Day of Reckoning Awaits the Child-Killers | December 19, 2025 | ransomware_live | — |
| The 200,000 Message Bombshell: Bennett’s Game is Over | December 18, 2025 | ransomware_live | — |
| Caught by the Octopus: Bennett’s Darkest Hour | December 17, 2025 | ransomware_live | — |
| Operation Octopus: Naftali Bennett | December 17, 2025 | ransomware_live | — |
| Naftali Bennett Chats | December 17, 2025 | ransomware_live | — |
| Targets Locked: The Minds Behind Arrow and David’s Sling Are Revealed | December 13, 2025 | ransomware_live | — |
| Plonter | December 11, 2025 | ransomware_live | — |
| From Shield to Shame | December 6, 2025 | ransomware_live | — |
| Dr. Isaac Gertz – Chief Nuclear Architect of the Zion Regime | November 29, 2025 | ransomware_live | — |
| 8200 Unit corpses | November 29, 2025 | ransomware_live | — |
| 10 corpses | November 22, 2025 | ransomware_live | — |
| Smile for the Camera – Handala Is Watching | November 15, 2025 | ransomware_live | — |
| Saturday Spotlight | November 8, 2025 | ransomware_live | — |
| The Saturday Files | November 1, 2025 | ransomware_live | — |
| Saturday Unveilings – Shadows Have Names | October 25, 2025 | ransomware_live | — |
| Commemoration of Commander Martyr Reza Awada | October 19, 2025 | ransomware_live | — |
| Saturday Reckoning | October 18, 2025 | ransomware_live | — |
| RedWanted Alert | October 11, 2025 | ransomware_live | — |
| Israel Fuel System | October 10, 2025 | ransomware_live | — |
| Statement of Establishment Of the Grassroots Resistance Front Of Right-Seekers – Handala | October 7, 2025 | ransomware_live | — |
| Handala RedWanted | October 7, 2025 | ransomware_live | — |
| List of Spacecom employees | September 28, 2025 | ransomware_live | — |
| A space surprise soon! | September 27, 2025 | ransomware_live | — |
| Amos Spacecom | September 27, 2025 | ransomware_live | — |
| We will soon be in your hollow regime | July 21, 2025 | ransomware_live | — |
| Yinon Magal | July 10, 2025 | ransomware_live | — |
| Iran Internation WhatsApp and Internal Access | July 9, 2025 | ransomware_live | — |
| Evidence of cooperation between the Mossad and Mojtaba Pourmohsen | July 9, 2025 | ransomware_live | — |
| Leaked Documents Reveal Identities of Iran International Staff | July 9, 2025 | ransomware_live | — |
| Iran International | July 8, 2025 | ransomware_live | — |
| Freedom Wood Doors Ltd | July 6, 2025 | ransomware_live | — |
| Niflaot Hatzuna Ltd | July 4, 2025 | ransomware_live | — |
| Vynopsis | July 3, 2025 | ransomware_live | — |
| Ivri, Kerner & Co | July 2, 2025 | ransomware_live | — |
| GlobaLinks | July 1, 2025 | ransomware_live | — |
| Hotam EC | June 30, 2025 | ransomware_live | — |
| ClockWorkAdmin | June 29, 2025 | ransomware_live | — |
| Weizmann New Leak | June 27, 2025 | ransomware_live | — |
| QHR Ltd | June 26, 2025 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).