Ransomware victim disclosure
← All victimsIsrael Defense Forces (IDF) – Persian-language Social Media Accounts
listed as IDF in Farsi · Claimed by Handala · listed 3 months ago
Status timeline
- Listed
Mar 6, 2026
- Data leaked
At a glance
About the victim
AI dossier — public-source company profileThe Israel Defense Forces (IDF) is the military arm of the State of Israel, responsible for national defence operations across land, sea, and air. The target in this claim refers specifically to the IDF's Persian-language (Farsi) social media presence, which is used for outreach and information operations directed at Persian-speaking audiences. These accounts are maintained as part of the IDF's foreign-language public communications strategy.
- Industry
- Military / National Defence
- Founded
- 1948
Attack summary
Severity: critical — The claimed exposure of identities of military-linked individuals operating covertly in hostile foreign countries constitutes a severe national security and personal safety risk, potentially endangering lives; this falls firmly in the category of sensitive government/defence PII at scale with serious real-world consequences.The hacktivist group Handala claims to have exfiltrated confidential information from Israeli army (IDF) Farsi-language accounts, specifically asserting possession of data related to 26 individuals connected to the Israeli military who are active in 'Axis of Resistance' countries, implying potential exposure of covert or intelligence-linked personnel.
Data the group says was taken
AI dossier — extracted from the leak post- Account credentials or profile data from IDF Farsi social media accounts
- Personal information of 26 individuals linked to the IDF
- Information on IDF-connected personnel operating in 'Axis of Resistance' countries
What the group claims
Tonight, the silence of the Persian pages of the Zionist army has been broken. Handala Hack is here; this time not for a warning, but for proof. All confidential information from Israeli army accounts has fallen into our hands. Now, 26 pages of individuals connected to the Zionist army in the Axis of Resistance countries…
Sources
Source
Indexed 3 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.