Ransomware victim disclosure
← All victimsIsrael's National Security Institute (INSS) / Mossad (former affiliation)
listed as Propaganda Chief and Former Mossad Deputy Exposed by Handala Hack · Claimed by Handala · listed 3 months ago
Status timeline
- Listed
Mar 25, 2026
- Data leaked
At a glance
About the victim
AI dossier — public-source company profileThe Israel National Security Institute (INSS) is a think-tank and research body affiliated with Tel Aviv University focusing on national security and strategic affairs. The named individual, Deborah Oppenheimer, is described as the current Head of International Affairs at the institute and a former Deputy Head of Foreign Relations and Cooperation at Mossad, Israel's foreign intelligence service. The post targets a specific individual's email account rather than a corporate entity.
- Industry
- Government Intelligence & National Security
Attack summary
Severity: critical — The claimed exfiltration of a former senior intelligence officer's (Mossad Deputy Head) email account represents a high-sensitivity national security and personal data breach, with potential exposure of classified or sensitive government and intelligence communications.Handala Hack claims to have successfully breached the personal email account of Deborah Oppenheimer, a former senior Mossad official and current INSS official, and to have exfiltrated its contents. No ransom demand is stated; the disclosure appears politically motivated.
Data the group says was taken
AI dossier — extracted from the leak post- Personal email account contents
- Potentially sensitive government/intelligence communications
- Foreign relations correspondence
What the group claims
Today, once again, the iron walls of Zionism have collapsed. We, Handala Hack, proudly announce that we have successfully breached the email account of Mrs. Deborah Oppenheimer, the former Deputy Head of Foreign Relations and Cooperation at Mossad, and the current Head of International Affairs at Israel’s National Security Institute. For years, he has been…
Sources
Source
Indexed 3 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.