10M israeli data for sell Listed by funksec Ransomware Group

On December 23, 2024, the funksec ransomware group listed what it claims is internal data belonging to more than 10 million Israelis for sale on its leak site.

Reported Details from Reporting

Public reporting indicates the group posted a sales thread on its dark-web leak portal describing files exfiltrated during a ransomware incident. The listing appeared on a Tor-based site tracked by ransomware.live. Available details describe the material as internal files taken after the attackers gained access to victim networks. Exact victim identities have not been publicly confirmed by any Israeli organization, and the precise number of individuals whose records are included remains unverified by independent third parties. The post sets commercial terms for purchase of the archive.

Why This Matters for You and Your Family

When a dataset this large appears for sale, the risk extends far beyond the original target. If your personal information or that of your spouse, children, or parents is inside, it can be bought by identity thieves, stalkers, or fraudsters within hours of the listing. Names, addresses, phone numbers, email accounts, and government ID details are typical contents of such caches. Once sold, the data fuels account takeovers, tax fraud, loan applications in your name, and harassment campaigns. Families often discover the breach only after damage has occurred because most people do not routinely check dark-web marketplaces.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one record set. Attackers and subsequent buyers map connections between leaked emails, phone numbers, gaming usernames, and social-media handles. A single credential from this incident can unlock linked accounts across banking, email, school portals, and online games. Children’s gaming accounts are especially vulnerable because parents often reuse passwords or security questions that appear in family data breaches. These chains accelerate doxxing: an attacker who obtains one piece of information can rapidly assemble a full profile including home address, family members’ names, and daily routines.

funksec Group Track Record

Public reporting attributes the funksec name to a ransomware operation that emerged in 2024. The group has claimed responsibility for attacks on organizations across multiple countries, typically following a double-extortion model: encrypt victim systems, then threaten to publish stolen data unless a ransom is paid. Notable prior victims listed on leak sites have included healthcare providers, educational institutions, and private companies. Their standard playbook involves initial access through phishing or exploited remote desktop services, followed by exfiltration of sensitive files before encryption. Extortion messages combine financial demands with countdown timers and public shaming on their leak portal when payments are not received.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains back to this incident.
• Rotate the password used on any Israeli-related service anywhere it is reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught in hours, not months.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts which often become entry points for doxxing chains.
• Let remediation specialists handle data-broker takedown requests and follow-up monitoring while you focus on securing day-to-day accounts.

The speed with which stolen data moves from leak sites into criminal hands leaves little room for delay. Starting protective steps now limits how far this claimed breach can reach. DoxxScan by GalaxyWarden delivers continuous monitoring across more than 13.1 billion+ breach records and over 100 platforms, AI-powered identity-chain mapping that connects online handles to real identities, and hands-on remediation by specialists who manage takedowns for you. Its household coverage extends to your children’s gaming accounts, which are frequently swept up in cascading credential leaks like this one.