Ort Harmelin College of Engineering Listed by rhysida Ransomware Group

On September 23, 2023, the Ort Harmelin College of Engineering appeared on the leak site operated by the Rhysida ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the Israeli technological college located in Netanya. The disclosure does not specify the number of records affected or the exact types of documents taken, only that sensitive internal material is now in the attackers’ possession and at risk of public release.

Details from the Leak-Site Listing

The Rhysida leak page, archived via ransomware.live, states the college was listed after an intrusion that combined encryption with data theft. The entry provides no victim count and does not itemize the files, a common practice on these sites to pressure negotiations while withholding full detail. The disclosure indicates the data remains available for download to anyone who pays the group’s fee or obtains it through other channels. As of the listing date, no public sample files had been released, but the mere presence on the site signals that exfiltration has already occurred.

Why This Matters for You and Your Family

Even though the victim is an educational institution, the people whose information appears in those internal files face direct exposure. Students, alumni, faculty, and administrative staff often have personal details such as addresses, phone numbers, dates of birth, national ID numbers, and financial records stored in college systems. If any of that material matches records belonging to you or your family, the breach creates a permanent risk of identity theft, phishing, and targeted scams. Internal files exfiltrated can include everything from enrollment forms to payroll spreadsheets, meaning one leak can expose multiple generations of a household at once.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at the first dataset. Attackers and subsequent buyers frequently cross-reference stolen internal files with other breaches to build detailed profiles. A college record that links your name, email, and phone number can be chained with credential leaks from gaming platforms, social media, or earlier data sales. This creates a doxxing chain that reveals home addresses, family relationships, and even children’s usernames. Once the chain exists, it is trivial for criminals to hijack accounts, impersonate family members, or launch extortion campaigns using personal information that should never have left the college’s servers.

Rhysida’s Known Track Record

Public reporting attributes the first notable Rhysida activity to May 2023. The group has since listed dozens of organizations across healthcare, education, and manufacturing sectors. Notable prior victims include a series of hospitals and municipal governments where Rhysida followed a consistent playbook: gain initial access through compromised remote desktop credentials or unpatched vulnerabilities, exfiltrate data quietly, deploy ransomware, then publish samples on their leak site when payment is refused. Their extortion style combines threats of full data publication with offers to delete samples for a fee, often pressuring smaller organizations that lack dedicated incident-response teams. The speed with which Ort Harmelin College appeared—within weeks of the group’s broader campaign—fits this pattern.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password used at the college or related services anywhere it has been reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next link in doxxing chains after credential leaks like this one.
• Let remediation specialists manage takedown requests for any exposed personal records that surface on data-broker or underground sites.

The incident underscores that educational institutions remain attractive targets because their databases contain lifelong records on thousands of individuals. Protecting yourself requires more than hoping the college eventually notifies you; it demands active, ongoing visibility into where your data travels. Start your DoxxScan trial today to gain that visibility and hands-on help from specialists who understand how these chains form and how to break them. DoxxScan’s continuous monitoring across 13.1B+ breach records and 100+ platforms, combined with AI-powered identity-chain mapping and family coverage including children’s gaming accounts, gives ordinary families the same defensive edge that large organizations try to maintain.