Ransomware Group intelligence

Handala

Active

Track Handala with 183 published victims and 5 known leak locations in a single intelligence view.

Victims 183 Known published victims in this dataset
First discovered 2024-05-26 Earliest victim discovery date
Last discovered 2026-04-15 Latest victim discovery date
Inactive since 10 days Days since the latest known victim
Top country Israel 70 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Handala is tracked by Breach House as a ransomware group with 183 published victims.

Israel is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Web location Unknown handala.to
    Leak location 2 Web location Unknown handala-hack.to
    Leak location 3 Onion service Unknown vmjfieomxhnfjba57sd6jjws2ogvowjgxhhfglsikqvvrnrajbmpxqqd.onion
    Leak location 4 Web location Unknown handala-team.to
    Leak location 5 Web location Unknown handala-hack.tw

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (183)

    Search, filter and paginate the victim timeline for Handala.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Handala’s Statement id28241 View details PALESTINE NGOs / Associations
    Ransomware When the Army’s Chief Was Under Handala’s Watch! General Herzi Halevi id28240 View details ISRAEL Public Sector
    Ransomware Unprecedented Exposure: Identities of 80 Senior Cyber Officers of “Iran Desk” in Unit 8200... id28239 View details ISRAEL Public Sector
    Ransomware HANDALA EMAIL ADDRESS id28238 View details IT
    Ransomware Dubai in Shock: Unprecedented Handala Cyberattack Shakes UAE Infrastructure! id28237 View details United Arab Emirates IT
    Ransomware Handala Strikes Back: Steel Giants Foulath and SULB Crippled in Retaliation Cyberattack id28236 View details BAHRAIN Manufacturing / Engineering
    Ransomware St. Joseph County id27961 View details United States Public Sector
    Ransomware PSK WIND’s Defense Networks Fall to Handala Hack id27960 View details Manufacturing / Engineering
    Ransomware Passover Wiped Clean: 22TB of Data Gone from 14 Companies id27959 View details Other
    Ransomware Publication of Photos and Personal Details of IranWire’s Traitorous Members id27958 View details Other
    Ransomware 50 Senior Unit 9900 Officers Exposed id27957 View details Public Sector
    Ransomware Handala Hack Strikes 27 Companies for Minab’s Innocents id27956 View details IT
    Ransomware Raz Zimmt’s Chats Leaked to the World id27955 View details Other
    Ransomware Exposing Israel’s Drone Queen: The Fall of Colonel Haimovich id27954 View details Communication / Marketing
    Ransomware IranWire id27767 View details Iran, Islamic Republic of Communication / Marketing
    Ransomware North Country Business Products Breached: 2,680 POS Terminals Disabled Nationwide id27712 View details United States IT
    Ransomware 4 Terabytes Wiped—Good Food Store Shut Down After Major Cyberattack id27711 View details United States Retail / E-commerce
    Ransomware Listen Closely, Gallant: Handala’s Eyes and Ears Are Everywhere id27710 View details Other
    Ransomware Kash Patel current director of the FBI id27616 View details Public Sector
    Ransomware Lockheed Martin Employees Given 48 Hours to Respond: A Tight Deadline Looms id27580 View details United States Manufacturing / Engineering
    Ransomware Propaganda Chief and Former Mossad Deputy Exposed by Handala Hack id27569 View details Public Sector
    Ransomware Official Statement by Handala Group in Response to Threats from the US and Its Allies id27568 View details Other
    Ransomware Architect of Warfare Exposed: Eran Ortal’s Hidden Strategies Now Public id27567 View details Public Sector
    Ransomware The Slightest Aggression: Enemy Infrastructure Reduced to Ashes id27566 View details Other
    Ransomware Behind the Curtain: Full Details of Shin Bet’s Iran Desk Officers Released id27565 View details Israel Public Sector
    Ransomware $50M Reward For Trump & Netanyahu id27564 View details Other
    Ransomware From Hunter to Hunted: Mossad’s Former Chief Falls into the Trap id27563 View details Israel Other
    Ransomware Martyr Ali Larijani id27403 View details
    Ransomware Vahid Offline Members id27383 View details
    Ransomware Who is VahidOnline? id27379 View details Iran, Islamic Republic of
    Ransomware Mossad’s Secret Treasury Exposed: 50,000 Confidential Emails Leaked id27378 View details Israel
    Ransomware Stryker Hit by Unprecedented 12-Petabyte Data Wipe id27353 View details United States
    Ransomware Shock for Israeli Intelligence: 100,000 Classified Emails of Mossad’s Ex-Deputy Director S... id27352 View details Israel
    Ransomware Laura Gilinski id27347 View details
    Ransomware No Place to Hide: Senior Navy Officers’ Identities Now Public id27321 View details Public Sector
    Ransomware Tamir Hayman id27314 View details Israel Education
    Ransomware Hebrew University of Jerusalem id27306 View details Israel Education
    Ransomware Raz Zimmt (head of the Iran Desk at Israeli security institutes) id27283 View details Israel Education
    Ransomware Stryker Corporation id27274 View details United States Education
    Ransomware Verifone id27273 View details United States Communication / Marketing
    Ransomware Full Access: Jerusalem’s Security Cameras in Handala’s Hands id27220 View details Other
    Ransomware Unprecedented Disclosure of 50 Senior Israeli Air Force Officers’ Information id27219 View details Israel Communication / Marketing
    Ransomware Contact Handala id27184 View details Palestine, State of Communication / Marketing
    Ransomware Israeli Weather Stations Crippled id27183 View details Israel Transportation / Travel / Logistics
    Ransomware Jerusalem Water Supply Facilities id27181 View details Israel Construction / Real Estate
    Ransomware Handala New Telegram id27164 View details Communication / Marketing
    Ransomware IDF in Farsi id27146 View details Iran, Islamic Republic of Communication / Marketing
    Ransomware Sanzer Hasidic community id27131 View details Communication / Marketing
    Ransomware Atlas Insurances Ltd id27101 View details Israel Finance / Legal / Insurance
    Ransomware Israel Institute for National Security Studies (INSS) id27085 View details Israel Education
    Ransomware Aramco id27024 View details Saudi Arabia Construction / Real Estate
    Ransomware Sharjah National Oil Corporation id26995 View details United Arab Emirates Energy
    Ransomware Israel Opportunity Energy id26972 View details Israel Energy
    Ransomware Clalit: Israel’s Largest Healthcare Organization Falls to Cyber Resistance id26839 View details Israel Healthcare / Pharma
    Ransomware The General in the Shadows: Sapir’s Commander Exposed id26658 View details Telecommunications
    Ransomware Handala New Account – Sunset of the lions id25761 View details Energy
    Ransomware Ignite Chaos at Your Own Risk: i24 Channel id25682 View details Communication / Marketing
    Ransomware Avraham Hayyim ( Mehrdad Rahimi ) – Mossad Agent id25571 View details Telecommunications
    Ransomware Ayelet Shaked Contact List id25268 View details Communication / Marketing
    Ransomware 15 SIGINT Agents Exposed — $50,000 Reward id25267 View details Telecommunications
    Ransomware Unveiling the Secrets: Inside the WhatsApp Chats of a Minister id25266 View details Public Sector
    Ransomware The Queen’s Secrets: Unveiling the Mysteries Behind Ayelet Shaked id25265 View details IT
    Ransomware Handala Alert: Amplifying the Voice of Resistance id25264 View details Palestine, State of Communication / Marketing
    Ransomware Braverman Files Unleashed: Every Secret Now Exposed id25176 View details Communication / Marketing
    Ransomware Bibi Gate: The Gatekeeper’s Fall | Tzachi Braverman id25173 View details Israel Other
    Ransomware Netanyahu’s Cabinet Awaits Handala’s Next Move id25172 View details Communication / Marketing
    Ransomware No Place to Hide: Unmasking the Masterminds Behind War Drones id24964 View details Communication / Marketing
    Ransomware The Day of Reckoning Awaits the Child-Killers id24906 View details Other
    Ransomware The 200,000 Message Bombshell: Bennett’s Game is Over id24881 View details Other
    Ransomware Naftali Bennett Chats id24865 View details Public Sector
    Ransomware Operation Octopus: Naftali Bennett id24857 View details Israel Communication / Marketing
    Ransomware Caught by the Octopus: Bennett’s Darkest Hour id24847 View details IT
    Ransomware Targets Locked: The Minds Behind Arrow and David’s Sling Are Revealed id24748 View details Retail / E-commerce
    Ransomware Plonter id24694 View details Israel Construction / Real Estate
    Ransomware From Shield to Shame id24478 View details IT
    Ransomware 8200 Unit corpses id24298 View details IT
    Ransomware Dr. Isaac Gertz – Chief Nuclear Architect of the Zion Regime id24297 View details Energy
    Ransomware 10 corpses id24134 View details Telecommunications
    Ransomware Smile for the Camera – Handala Is Watching id23910 View details Transportation / Travel
    Ransomware Saturday Spotlight id23740 View details Other
    Ransomware The Saturday Files id23547 View details NGOs / Associations
    Ransomware Saturday Unveilings – Shadows Have Names id23337 View details Energy
    Ransomware Commemoration of Commander Martyr Reza Awada id23193 View details Other
    Ransomware Saturday Reckoning id23188 View details Manufacturing / Engineering
    Ransomware RedWanted Alert id22970 View details Manufacturing / Engineering
    Ransomware Israel Fuel System id22931 View details Israel Energy
    Ransomware Handala RedWanted id22855 View details IT
    Ransomware Statement of Establishment Of the Grassroots Resistance Front Of Right-Seekers – Handala id22852 View details Public Sector
    Ransomware List of Spacecom employees id22616 View details Communication / Marketing
    Ransomware Amos Spacecom id22608 View details Israel Retail / E-commerce
    Ransomware A space surprise soon! id22607 View details Communication / Marketing
    Ransomware We will soon be in your hollow regime id21253 View details Other
    Ransomware Yinon Magal id21084 View details Communication / Marketing
    Ransomware Leaked Documents Reveal Identities of Iran International Staff id21073 View details United Kingdom Communication / Marketing
    Ransomware Evidence of cooperation between the Mossad and Mojtaba Pourmohsen id21069 View details Communication / Marketing
    Ransomware Iran Internation WhatsApp and Internal Access id21068 View details Communication / Marketing
    Ransomware New Telegram Channel id21054 View details Communication / Marketing
    Ransomware Iran International id21053 View details Iran, Islamic Republic of Communication / Marketing
    Ransomware Freedom Wood Doors Ltd id21002 View details Communication / Marketing
    Ransomware Niflaot Hatzuna Ltd id20960 View details Israel Construction / Real Estate
    Ransomware Vynopsis id20945 View details Finance / Legal / Insurance
    Ransomware Ivri, Kerner & Co id20929 View details Israel Finance / Legal / Insurance
    Ransomware GlobaLinks id20922 View details United States Communication / Marketing
    Ransomware Hotam EC id20899 View details Ecuador Construction / Real Estate
    Ransomware ClockWorkAdmin id20892 View details Communication / Marketing
    Ransomware Weizmann New Leak id20855 View details IT
    Ransomware QHR Ltd id20835 View details Canada Services
    Ransomware JobPlace Ltd id20832 View details Communication / Marketing
    Ransomware Israel Job Info Ltd id20775 View details Israel Communication / Marketing
    Ransomware Shelter Locations in Israel id20774 View details Israel Communication / Marketing
    Ransomware Ben Horin & Alexandrovitz Ltd id20768 View details Israel IT
    Ransomware Zacharia Levi Ltd id20763 View details Israel Communication / Marketing
    Ransomware Kibbutz Almog id20756 View details Israel Finance / Legal / Insurance
    Ransomware Sivim IT id20755 View details Italy Communication / Marketing
    Ransomware Haor Heavy Transport id20742 View details Transportation / Travel / Logistics
    Ransomware YHD Group id20741 View details China Transportation / Travel
    Ransomware Saban Systems id20740 View details Israel Construction / Real Estate
    Ransomware Agura B.C LTD id20719 View details Israel Communication / Marketing
    Ransomware Mor-logistics id20718 View details Israel Transportation / Travel / Logistics
    Ransomware Weizmann Institute of Science id20717 View details Israel Education
    Ransomware TBN Israel id20678 View details Israel Communication / Marketing
    Ransomware Israel’s fuel supply system Data id20674 View details Israel Energy
    Ransomware 099 ISP id20663 View details Russian Federation Telecommunications
    Ransomware Y.G. New Idan id20649 View details Israel Communication / Marketing
    Ransomware Israel’s fuel supply system id20648 View details Israel Energy
    Ransomware Aerodreams id20647 View details Argentina Communication / Marketing
    Ransomware Israel Police id17278 View details Israel Communication / Marketing
    Ransomware Tosaf id17114 View details Netherlands Manufacturing / Engineering
    Ransomware Israel Ministry of National Security id16967 View details Israel Public Sector
    Ransomware Zuk Group id16720 View details United Arab Emirates Communication / Marketing
    Ransomware Allen Carr’s Easyway id16447 View details United Kingdom Transportation / Travel / Logistics
    Ransomware Reutone id16393 View details Israel Communication / Marketing
    Ransomware GNS Cloud id16096 View details Israel IT
    Ransomware Harel Insurance ( Shirbit Server ) id15805 View details Israel Finance / Legal / Insurance
    Ransomware Silicom id15599 View details Israel Other
    Ransomware SSV Blockchain Network id15553 View details Syrian Arab Republic Telecommunications
    Ransomware Elad municipality id15131 View details Israel Public Sector
    Ransomware IM Cannabis id15060 View details Israel Healthcare / Pharma
    Ransomware AGAS id15014 View details Switzerland IT
    Ransomware Doscast id14711 View details Israel Public Sector
    Ransomware Ambassador of Israel in Germany Emails id14658 View details Germany Communication / Marketing
    Ransomware Max Shop id14644 View details Israel Retail / E-commerce
    Ransomware IIB ( Israeli Industrial Batteries ) Leaked id14620 View details Israel Manufacturing / Engineering
    Ransomware Shin Bet id14578 View details Israel Communication / Marketing
    Ransomware Israel Prime Minister Emails id14560 View details Israel Communication / Marketing
    Ransomware Soreq NRC id14488 View details Israel Construction / Real Estate
    Ransomware Israel foreign affairs minister Emails id14461 View details Israel Retail / E-commerce
    Ransomware Israel defense minister private photos id14440 View details Israel Communication / Marketing
    Ransomware Benny Gantz id14419 View details Israel Retail / E-commerce
    Ransomware Vidisco id14361 View details Israel Transportation / Travel
    Ransomware IIB ( Israeli Industrial Batteries ) id14360 View details Israel Manufacturing / Engineering
    Ransomware Appletec Ltd id14056 View details Israel Public Sector
    Ransomware EPS Tech R&D id13979 View details Israel IT
    Ransomware EPS Tech confidential source code ( military ) id13939 View details Israel IT
    Ransomware EPS Tech Ltd id13841 View details Israel IT
    Ransomware Innovalve 3TB ( $300M ) id13741 View details Other
    Ransomware Innovalve 3TB Data Leak ( $300M ) id13558 View details Other
    Ransomware BLEnergy id13505 View details Energy
    Ransomware Handala’s attack on Israeli organizations id13458 View details Israel NGOs / Associations
    Ransomware Eyal Baror the key official of the 8200 unit id13407 View details Hospitality / Food & Beverage / Tourism
    Ransomware [temporary] Warning for Eyal Baror id13377 View details Hospitality / Food & Beverage / Tourism
    Ransomware Innovalve Bio Medical id13367 View details Healthcare / Pharma
    Ransomware Sheba Medical Center id13358 View details Healthcare / Pharma
    Ransomware Sonol ( Gas Stations ) id13311 View details Energy
    Ransomware Independent Education System id13214 View details Education
    Ransomware Zerto Security id13113 View details Communication / Marketing
    Ransomware SolidCAM 2024 SP0 id13039 View details Telecommunications
    Ransomware Ma’agan Michael Kibbutz id13027 View details Israel Communication / Marketing
    Ransomware SolidCAM LEAK id12960 View details Construction / Real Estate
    Ransomware SolidCAM id12938 View details United States IT
    Ransomware Elfi-Tech id12883 View details IT
    Ransomware My City application id12800 View details Public Sector
    Ransomware Information Technology id12741 View details Israel IT
    Ransomware Israel Textile id12728 View details Israel Healthcare / Pharma
    Ransomware Israel Massad Quality id12727 View details Israel Education
    Ransomware Israel largest cyber security college id12726 View details Israel Education
    Ransomware Israel 99 Digital! id12725 View details Israel IT
    Ransomware Israel Radars! id12724 View details Israel Public Sector
    Ransomware Kashin Distillery id12723 View details Israel Manufacturing / Engineering
    Ransomware High Group id12722 View details Israel Construction / Real Estate
    Ransomware Amigour Company id12721 View details Israel Construction / Real Estate
    Ransomware Harmony Pharm id12720 View details Israel Healthcare / Pharma
    Ransomware Ramat Gan Academic College id12719 View details Israel Education