-
50 Senior Unit 9900 Officers Exposed
April 4, 2026
•
[ ransomware, espionage, government ]
50 Senior Unit 9900 Officers Exposed was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-04-04. Sector: Government & Defense. Today, for the first time, the complete details of 50 senior officers from Unit 9900 of the Israeli military intelligence (Aman) have been made public. This historic exposure is the result of months of surveillance and complex cyber operations by Handala Hack, a move that has sent shockwaves through the very foundation of the Zionist
-
Publication of Photos and Personal Details of IranWire’s Traitorous Members
April 3, 2026
•
[ ransomware, leak ]
Publication of Photos and Personal Details of IranWires Traitorous Members was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-04-03. Sector: Other. We inform the honorable and resilient people that the complete details along with clear photos of 20 members of IranWire who have betrayed the homeland are now available to the public. The names of these individuals are as follows: Maryam Dehkordi Sina Ghanbarpour Maziar Bahari Mojtaba Hosseini Solmaz Elkder Samaneh Ghadarkhani Roghieh Rezaei Payam Younesi
-
Passover Wiped Clean: 22TB of Data Gone from 14 Companies
April 2, 2026
•
[ ransomware, hack ]
Passover Wiped Clean: 22TB of Data Gone from 14 Companies was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-04-02. On the occasion of Passover, this significant holiday for our dear Zionists and beloved occupiers, we at Handala Hack would like to extend our unique greetings. As part of our ongoing commitment to supporting the oppressed and resisting occupation and injustice, we have successfully carried out a large-scale, targeted cyber operation. In this mission, the
-
PSK WIND’s Defense Networks Fall to Handala Hack
April 2, 2026
•
[ ransomware, hack, energy ]
PSK WINDs Defense Networks Fall to Handala Hack was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-04-02. Sector: Energy & Utilities. In continuation of our series of cyber operations against the military infrastructure of the Zionist regime, Handala Hack Group has once again struck a decisive blow. Through a sophisticated cyber-attack, we have successfully infiltrated the networks of PSK WIND Technologies, the main designer and implementer of integrated command and control systems for the Zionist regimes
-
St. Joseph County
April 1, 2026
•
[ ransomware, government, hack ]
St. Joseph County was listed as a victim on the leak site of the handala ransomware group; the attack is estimated to have taken place on 2026-04-01. Sector: Government & Defense. Country: United States of America. We, the members of Handala Hack, proudly announce that through a targeted and intelligent operation, we have completely taken control of the centralized IT infrastructure of St. Joseph County in the state of Indiana. This operation was successfully executed after months of monitoring, reconnaissance, and meticulous planning. During this attack, over 2 terabytes of the
-
El Wastani Petroleum Company (WASCO)
April 8, 2026
•
[ ransomware, energy ]
El Wastani Petroleum Company (WASCO) was listed as a victim on the leak site of the payload ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Energy & Utilities. Country: Libya. Data size claimed by the group: 50 GB. El Wastani Petroleum Company (WASCO) is an Egyptian oil and gas company focused on the exploration, production, and processing of natural gas and condensate. It operates fields and infrastructure, including processing facilities and compression stations, mainly in the Nile Delta and North Sinai regions. The company serves as a regional operator, supporting the development of Egypts gas industry.
-
Deaconess Health System
January 7, 2026
Deaconess Health System was listed as a victim on the leak site of the worldleaks ransomware group; the attack is estimated to have taken place on 2026-01-07. Sector: Healthcare. Country: United States of America. Website: deaconess.com. [AI generated] Deaconess Health System is a nonprofit regional health care organization based in Evansville, Indiana, United States. It operates hospitals, clinics, and specialty care centers across the tri-state area of Indiana, Illinois, and Kentucky. Services include emergency care, oncology, cardiology, orthopedics, and behavioral health. Founded in 1892, it remains one of the largest employers in southwestern Indiana.
-
Gerald Zisser GmbH
April 8, 2026
Gerald Zisser GmbH was listed as a victim on the leak site of the krybit ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Professional Services. Country: Germany. Website: Gerald Zisser GmbH. Gerald Zisser GmbH is a private Austrian company specializing in building technical services, focusing on plumbing, heat...
-
Adaptavist Group LTD
March 23, 2026
Adaptavist Group LTD was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-03-23. Sector: Technology. Country: United Kingdom of Great Britain and Northern Ireland. Website: adaptavist.com. Adaptavist Group LTD is a British platinum Atlassian partner and enterprise software developer serving Fortune 500 clients including NASA, Visa, Deutsche Bank, and government organizations. The company's flagship product is ScriptRunner for Atlassian Jira, Confluence, and Bitbucket.
Complete infrastructure compromise: source code of all products (ScriptRunner, Salable licensing platform), 484,220 customer records from HubSpot CRM (GDPR violation), 20,000+ legal tickets with 33,000 documents including 2,000 NDAs and contracts, 3TB+ from Nexus repositories (production secrets, Docker images, Helm charts), Kubernetes, OAuth credentials, Snowflake Data Warehouse, Confluence (24,547 pages, 100+GB documentation), production databases. Licensing system compromised enabling product cloning.
-
EMCO Holding
April 8, 2026
•
[ ransomware, manufacturing, energy ]
EMCO Holding was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Manufacturing. Country: Germany. Website: emcoholding.com. emcoholding.com Grupo EMCO Holding is a conglomerate of prestigious companies operating in different areas, guided by a philosophy of excellence and responsibility, with significant investments in Central America. In recent years, the group has diversified and has strongly positioned itself in fields such as the airport sector, cargo terminals, steel production, and steel manufacturing, and is currently developing energy generation projects. Thanks to its major projects, rapid growth, and investments, Grupo EMCO has established itself as one of the most important, strongest, and most prestigious groups in Central America.
-
DGS
April 8, 2026
•
[ ransomware, manufacturing, technology ]
DGS was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Manufacturing. Country: United States of America. Website: dgsts.com. dgsts.com DGS Technical Services is a structural steel and mechanical engineering firm that has been providing comprehensive design, detailing, and 3D modeling services since 2004. Based in Elgin, Illinois, they serve a variety of industrial and commercial clients, including those in the semiconductor and vending machine industries.
-
Win Academy
April 8, 2026
•
[ ransomware, education ]
Win Academy was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Education. Country: India. Website: Winacademy.net. Winacademy.net is an educational platform dedicated to preparing students for the JEE Main engineering entrance exam in India. It provides comprehensive details about the exam, including its pattern, syllabus, and eligibility criteria for top engineering institutes
-
Innovision Holdings
April 5, 2026
•
[ ransomware, retail, manufacturing ]
Innovision Holdings was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-05. Sector: Retail & E-Commerce. Country: United Kingdom of Great Britain and Northern Ireland. Website: ivcorp.com. ivcorp.com zoominfo.com/c/innovision-holdings-corp/1132964507 Founded in 2004, InnoVision Holdings Corporation is a group of apparel and accessories companies that focus on brand developments, product innovation, global sales, marketing and distribution. From the company's luxury fashion division to the company's mass market fan wear subsidiary, InnoVisions companies combine innovative designs, high quality, utility with respected brands in their respective markets. Through its portfolio of brands, be it its fully owned or licensed, created or acquired, InnoVision designs, manufacture and distribute to a diverse base of retailers in luxury lifestyle, outdoor, speciality and mass markets in over 30 countries
-
Mahyco Pvt
April 8, 2026
•
[ ransomware, manufacturing, technology ]
Mahyco Pvt was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Agriculture and Food Production. Country: India. Website: mahyco.com. mahyco.com zoominfo.com/c/mahyco-pvt-ltd/23527722 Mahyco Private Limited is a pioneer in the research, development, production, processing, and marketing of high-quality hybrid and open-pollinated seeds for the Indian agricultural sector. Founded in 1964, the company aims to enhance the lives of farmers through innovative agricultural products and cutting-edge technology. Mahyco serves a diverse clientele of farmers across India, providing them with superior seed varieties that improve yield and profitability
-
Ciarus
April 8, 2026
•
[ ransomware, technology, leak ]
Ciarus was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Technology. Country: Germany. Website: ciarus.de. ciarus.de zoominfo.com/c/ciarus/1324145982 Ciarus Technologies is a software development company based in Germany that specializes in custom software development, web and mobile app development, IT outsourcing, and DevOps services. They cater to businesses looking for tailored IT solutions to enhance their competitiveness in the digital landscape. With a focus on exceptional customer service and technical expertise, Ciarus aims to help clients bring their ideas to life through reliable and cost-effective technology
-
Hospital del Sur
April 8, 2026
•
[ ransomware, healthcare ]
Hospital del Sur was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Healthcare. Country: Argentina. Website: hospitaldelsur.gov.co. hospitaldelsur.gov.co zoominfo.com/c/hospital-del-sur-itag-gabriel-jaramillo-piedrahita-sede-santamara/547031936 E.S.E Hospital del Sur is a healthcare institution located in Itag, Antioquia, Colombia, providing a range of medical services including general consultations, hospitalization, imaging, laboratory services, and emergency care
-
Optima Servicios Financieros
April 8, 2026
Optima Servicios Financieros was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Financial Services. Country: Mexico. Website: optima.com.sv. optima.com.sv zoominfo.com/c/optima-servicios-financieros/372626508 Optima Sociedad de Ahorro y Crdito provides financial products and services tailored for the micro, small, and medium enterprises sector in El Salvador. The company offers various types of loans, including business, corporate, and personal loans, along with services such as basic services payment and remittances. With over 15 years of experience and international backing, Optima aims for dual profitability in its operations. Their commitment to customer service and transparency is supported by a range of financial solutions designed to assist their clients effectively
-
ACE Consulting Engineers
April 8, 2026
•
[ ransomware, hack, manufacturing ]
ACE Consulting Engineers was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Professional Services. Country: Egypt. Website: ace-mb.com. ace-mb.com rocketreach.co/ace-consulting-engineers-moharrambakhoum-profile_b6a453d5c87891f3 CE Moharam Bakhoum is a privately-owned international multidisciplinary engineering consultancy and project management organization, founded in 1950. With over 70 years of experience, ACE has become one of the most accomplished and well-renowned companies worldwide. We operate primarily across the Middle East, Africa, Asia, and Eastern Europe and have an exceptional portfolio of mega-projects and award-winning designs in more than 35 countries. Our services span across the entire range of construction-related activities; planning, design, project management and construction supervision, to name a few
-
Thai Special Gas
April 8, 2026
•
[ ransomware, energy, manufacturing ]
Thai Special Gas was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Energy & Utilities. Country: Thailand. Website: tsgco.co.th. tsgco.co.th zoominfo.com/c/thai-special-gas-co-ltd/454621538 Thai Special Gas (TSG) specializes in providing high-quality industrial and energy gases, onsite gas generators, refrigerants, and related equipment. The company is dedicated to delivering exceptional customer service and integrated solutions, ensuring client satisfaction through advanced technology and rapid response. TSG also offers engineering services, quality control and laboratory testing, cylinder testing, and training programs for gas handling. With over 20 years of expertise
-
Structures Stucco
April 8, 2026
•
[ ransomware, manufacturing ]
Structures Stucco was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-04-08. Sector: Manufacturing. Country: United States of America. Website: structuresstucco.com. structuresstucco.com zoominfo.com/c/structures-stucco-llc/398264895 Structures Stucco, LLC is a stucco subcontractor based in Phoenix, Arizona, specializing in multi-family homes, single-family homes, and commercial buildings. The company is committed to providing quality work, honest service, and great value, ensuring customer satisfaction through top-quality stucco services. They offer written quotes with accurate estimates of time and budget before starting any project. Structures Stucco prioritizes delivering quality jobs without compromising affordability or speed of implementation
