Israel 99 Digital! Listed by Handala Ransomware Group

On April 13, 2024, the ransomware group Handala publicly listed Israel 99 Digital on its leak site, claiming to have exfiltrated 5.2 TB of internal files from the organization in a ransomware attack. The listing includes inflammatory political statements directed at “Zionists” and Unit 8200, along with assertions that more than 500K alert messages were sent. Anyone whose personal or professional data touched Israel 99 Digital’s systems may now face heightened exposure.

Reported Details from the Leak Site

The Handala leak site states that it hacked Israel 99 Digital and exfiltrated internal files during a ransomware operation. It explicitly claims 5.2 TB of data containing “sensitive conversations of organizations” were taken. The posting does not quantify the number of individuals affected, nor does it list specific data types such as names, addresses, financial records, or email correspondence. The disclosure indicates the files were dumped as a form of retaliation, but provides no independent evidence or screenshots to verify the volume or content. As of the listing date, the site presented the breach as active and unresolved.

Why This Matters for You and Your Family

When a company handling communications or operational data for organizations is breached, the ripple effects reach ordinary people. If you or any member of your family interacted with Israel 99 Digital—whether through work, partnerships, client services, or shared vendors—your details could sit inside the claimed 5.2 TB dump. Even without exact victim counts, the exposure of internal files often includes contact lists, correspondence, and identifiers that threat actors later weaponize. For households, this means one compromised email or phone number can lead to targeted phishing, spam, or worse. The political framing of the attack does not reduce the personal risk; it simply adds another motive for the data to be circulated or sold.

The Doxxing and Identity-Chain Implications

Internal files from a digital services firm frequently contain spreadsheets, chat logs, and customer records that link real identities to email addresses, phone numbers, and sometimes physical addresses. Once published, these fragments allow attackers to build identity chains—connecting your work handle to personal accounts, then to family members. Credential leaks of this nature routinely cascade into gaming account takeovers, especially for children and teenagers who reuse passwords or security questions. A single exposed conversation can supply the social engineering details needed to reset accounts or impersonate you. The result is accelerated doxxing: your name, family connections, and online footprint become easier to map and exploit across forums and dark-web markets.

Handala Group’s Known Track Record

Public reporting attributes Handala’s emergence to late 2023, with a pattern of attacks that blend financial ransomware demands and ideological messaging. The group has primarily targeted Israeli-linked entities and has repeatedly used its leak site to publish political statements alongside stolen data. Typical playbook includes initial access through phishing or exploited remote services, followed by claimed exfiltration of large document repositories, then dual extortion: ransom demands paired with public shaming. The April 13, 2024 listing of Israel 99 Digital follows this pattern, mixing claims of 5.2 TB stolen with overt threats. Exact success rates and prior ransom payments remain unconfirmed in open sources, but the group’s consistent posting on dedicated leak infrastructure shows it follows through on data publication when demands go unmet.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you used at Israel 99 Digital or related services, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts vulnerable to credential chaining from breaches like this.
• Let DoxxScan remediation specialists manage takedown requests for any exposed personal records appearing on data broker or extortion sites.

The incident underscores that politically motivated ransomware still creates ordinary identity risk for anyone whose data travels through the victim’s systems. Staying ahead requires more than reactive checks; it demands ongoing visibility into how your information moves. DoxxScan by GalaxyWarden delivers that edge through continuous monitoring across 13.1 billion-plus breach records and over 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today to close the gaps this claimed breach and future ones can exploit.