Ivri, Kerner & Co Listed by Handala Ransomware Group

On July 2, 2025, the ransomware group Handala added the Israeli law firm Ivri, Kerner & Co to its leak site, claiming to have exfiltrated internal files after breaching the firm’s systems.

What Public Reporting Shows

Public reporting indicates the firm’s “walls of encryption” were compromised and that Handala published a message accusing Ivri, Kerner & Co of complicity in what it called injustice. The group posted samples of allegedly stolen internal documents on its leak page hosted at handala-hack.to. No exact number of records or specific client names have been publicly detailed, but the posting states that internal files were exfiltrated. The firm has not released an official statement on the volume or sensitivity of the data as of the latest available reporting.

Why This Matters for You and Your Family

When a law firm is breached, the documents taken often contain names, addresses, phone numbers, email accounts, financial details, and case-related personal information belonging to ordinary clients. If your family has ever used legal services—wills, property transfers, divorce, immigration, or insurance claims—your data may now sit in a ransomware leak repository. Once posted publicly, that information rarely disappears on its own. It becomes searchable by identity thieves, stalkers, or anyone looking to build a profile on you or your children.

The Doxxing and Identity-Chain Implications

Ransomware leaks like this one rarely stop at the initial victim. Exposed emails and phone numbers are quickly fed into automated tools that link them to social-media handles, gaming accounts, and family-member profiles. A single leaked work email can reveal your home address through public records, then connect to your child’s Roblox or Fortnite username. These chains turn one breach into repeated harassment, account takeovers, and doxxing campaigns that can last for years. Credential leaks of this type frequently cascade into gaming-account compromises because children often reuse simplified versions of family passwords.

Handala’s Publicly Known Track Record

Public reporting attributes Handala with emerging in late 2024 as a politically motivated ransomware actor focused on Israeli targets. The group typically gains initial access through phishing or unpatched remote desktop services, exfiltrates data before encrypting systems, and then demands payment while simultaneously leaking samples on its dedicated site. Notable prior victims include other Israeli organizations in sectors ranging from manufacturing to legal services. Its playbook combines encryption with public shaming, using ideological language to justify the attacks and pressure victims into paying or facing prolonged exposure.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains back to this claimed breach.
• Rotate any password you ever used at Ivri, Kerner & Co anywhere it has been reused, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts often targeted after credential leaks like this one.
• Let remediation specialists handle takedown requests and broker removals while you focus on securing your own accounts and talking with your family about safe password habits.

The pace of these incidents shows no sign of slowing. One law-firm breach can expose thousands of ordinary families who never expected their private legal matters to appear on a ransomware site. Starting with a clear map of your exposed data and putting continuous monitoring and specialist remediation in place gives you practical control instead of waiting to become the next victim. DoxxScan by GalaxyWarden delivers that combination—continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.