15 SIGINT Agents Exposed — $50,000 Reward Listed by Handala Ransomware Group

On January 3, 2026, the Handala ransomware group publicly released internal files exposing the identities of 15 SIGINT officers from an Israeli intelligence agency, accompanied by a $50,000 reward listing for further information on these individuals.

Reported Details of the Breach

Public reporting indicates the data came from a ransomware attack in which the group exfiltrated internal files before encrypting systems. The leak site post frames the action as a direct strike against what it calls the “Zionist regime’s intelligence apparatus,” specifically naming Signal Intelligence officers. Available reporting describes the exposed material as internal documents that reveal names and identifying details of these 15 individuals. The group set a $50,000 reward for additional intelligence on the officers, a tactic not commonly seen in standard ransomware data dumps.

No confirmed total victim count beyond the 15 SIGINT officers has been released. The breach appears limited to this targeted intelligence unit rather than a mass consumer data exposure, yet the personal details now sit on a publicly accessible ransomware leak site.

Why This Matters for You and Your Family

When names and personal details of intelligence officers appear on criminal leak sites, it demonstrates how quickly any sensitive personal information can move from a secure environment into the hands of threat actors. If it can happen to trained professionals operating inside protected networks, it can happen to your family through far more ordinary routes such as a compromised email account, reused password, or third-party vendor breach.