Amigour Company Listed by handala Ransomware Group

On May 16, 2024, the Handala ransomware group publicly listed Amigour Management of Assets on its leak site, claiming to have exfiltrated and wiped 522 GB of the Israeli housing and community development company’s internal files. The disclosure states that Amigour, which receives public funding for housing projects, was targeted because of its alleged role in “Zionist” settlement activity. Anyone whose personal information appears in those files—employees, residents, contractors, or partners—now faces immediate exposure.

Reported Details from the Listing

The Handala leak site posting declares that the company’s systems were compromised in a ransomware attack, data was allegedly exfiltrated, and the victim’s environment was subsequently wiped. It explicitly names Amigour Management of Assets and provides links to the company’s Israeli website and LinkedIn profile. The listing does not quantify the number of individuals affected, nor does it itemize every file type taken. It does state that 522 GB of data was removed and that settlement-related activity triggered the operation. The disclosure indicates the group will treat any entity involved in building settlements in “our lands” as a legitimate target.

Why This Matters for You and Your Family

When a housing and community development organization loses control of internal files, the information inside often includes names, addresses, phone numbers, national ID numbers, banking details, and correspondence tied to real people. If you or your family have lived in Amigour-managed properties, applied for housing assistance, worked as a vendor, or appear in employee records, your data may now sit on a publicly accessible extortion site. Personal records from such organizations routinely surface in subsequent identity-theft campaigns, spam, and targeted fraud because they link real-world identities to physical locations and financial relationships.

The Doxxing and Identity-Chain Risk

Exposed internal files rarely stop at one dataset. A single leaked email or phone number can be chained with gaming usernames, social-media handles, and family-member records to build a complete profile. Attackers then use these linkages for account takeovers, SIM-swapping, or public doxxing. Credential leaks of this nature frequently cascade into children’s gaming accounts that share the same household email or password patterns. Once an attacker controls one account, they can pivot to others, turning a corporate breach into sustained personal harassment or financial fraud against you and your family.

Handala’s Known Track Record

Public reporting attributes the Handala group’s emergence to late 2023, with a focus on ideologically motivated attacks against Israeli and Western targets. The group openly frames its operations as retaliation for political and military actions, selecting victims it labels as “Zionist” or aligned with opposing governments. Its typical playbook combines initial access through phishing or unpatched remote services, followed by exfiltration of sensitive files, deployment of ransomware to encrypt systems, and dual extortion: demanding payment while threatening to publish or sell the stolen data. The Amigour listing follows this pattern, mixing political messaging with a concrete data-dump claim.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used at Amigour or its related systems anywhere it is reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household—DoxxScan family coverage extends to dependents and children’s gaming accounts that often chain back to the same address or credentials.
• Let the remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing daily accounts.

The Handala listing of Amigour is a reminder that geopolitical ransomware now pulls ordinary families into the crosshairs whenever their housing provider or employer is targeted. Acting quickly on credential hygiene and identity mapping limits how far attackers can travel down the chain. DoxxScan by GalaxyWarden delivers that continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that explicitly includes children’s gaming accounts. Start your DoxxScan trial today and close the gaps before the next wave of exploitation begins.