Ransomware victim disclosure
← All victimsIsrael Meteorological Service
listed as Israeli Weather Stations Crippled · Claimed by Handala · listed 3 months ago
Status timeline
- Listed
Mar 8, 2026
- Data leaked
At a glance
About the victim
AI dossier — public-source company profileThe Israel Meteorological Service (IMS) is the governmental agency responsible for meteorological monitoring, forecasting, and weather data collection across Israel. It operates a national network of weather stations serving civilian aviation, military operations, agriculture, and emergency services. The agency functions under the Israeli government and provides critical environmental data infrastructure.
- Industry
- Government Meteorological & Weather Services
Attack summary
Severity: high — The group claims destructive wiping of critical national infrastructure (weather stations) with direct stated impact on military and aviation operations, constituting operational disruption to critical infrastructure; however no independently verified proof files are advertised.Handala claims to have fully infiltrated the main servers of Israel's meteorological systems and wiped all governmental and military weather stations, rendering none of them operational; the group asserts the attack disrupts Israeli aviation and military capabilities.
Data the group says was taken
AI dossier — extracted from the leak post- Governmental weather station data
- Military weather station data
- Meteorological server contents
What the group claims
Greetings to all freedom-loving nations and resistance fighters. Following a series of successful cyber operations, Handala Hack has fully infiltrated the main servers of the Zionist regime’s meteorological systems and has wiped out all governmental and military weather stations. As of this moment, none of these stations are operational, leaving the enemy’s aviation and military…
Sources
Source
Indexed 3 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.