SolidCAM LEAK Listed by Handala Ransomware Group

On June 11, 2024, Israeli CAD/CAM software maker SolidCAM appeared on the leak site of the handala ransomware group. The listing states that internal files were exfiltrated during a ransomware attack and threatens to publish them unless the company negotiates. The group also released a 50 GB proof-of-concept sample containing unreleased software still under development.

Details in the Leak Listing

The handala leak site entry for SolidCAM states that data was taken in a ransomware incident. It does not specify the total volume of stolen material beyond the 50 GB PoC sample, nor does it list exact record counts or name the precise types of internal files involved. The disclosure indicates the company has so far declined to engage with the extortion demand, prompting the actors to publish the unreleased software as leverage. The primary source makes clear that further data will be released if SolidCAM continues its denial.

Why This Matters for You and Your Family

When a company that develops specialized engineering software suffers a breach, the consequences reach far beyond corporate walls. Customers, partners, and employees may have their names, contact details, project files, or licensing information exposed. For individuals and families, this can mean sudden exposure of professional identities that link directly to home addresses, phone numbers, or email accounts. Internal files exfiltrated in such attacks often contain spreadsheets, design documents, or configuration data that reveal personal or household connections once they surface on criminal forums.

The Doxxing and Identity-Chain Risk

Stolen internal files rarely stay isolated. A single email address or username found inside them can be chained with data from earlier breaches to map out your full digital footprint. Threat actors routinely combine leaked credentials, project metadata, and customer lists to impersonate victims, hijack accounts, or sell targeted identity packs. This incident illustrates how a business breach quickly becomes a personal one: information that surfaces today can fuel account takeovers, phishing campaigns, or physical doxxing weeks or months later. Credential leaks like this one also cascade into gaming accounts belonging to you or your children, where the same email or reused password grants attackers entry to Steam, Discord, or Roblox profiles tied to the same household.

Handala Ransomware Group's Track Record

Public reporting attributes handala with emerging in late 2023 as a relatively new ransomware and extortion operation. The group typically gains initial access through phishing or exploited remote desktop services, exfiltrates data before deploying encryption, and then runs a double-extortion campaign that combines data leaks with threats of further publication. Notable prior victims have included manufacturing and technology firms whose proprietary files were used as bargaining chips. The group’s playbook relies on public shaming via its dedicated leak site, releasing proof-of-concept samples to demonstrate seriousness, and applying steady pressure through incremental data dumps when targets refuse to pay.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you used at SolidCAM or related engineering portals anywhere else it is reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same address or credentials.
• Let remediation specialists manage takedown requests for any exposed personal data found on broker sites or forums.

The SolidCAM listing is a reminder that ransomware groups continue to treat stolen intellectual property and customer data as currency. Protecting yourself means assuming your information will eventually appear somewhere and acting before criminals connect the dots. Start your DoxxScan trial for continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation by specialists that keeps your entire family—including gaming profiles—safer from cascading breaches.