Handala Hack Strikes 27 Companies for Minab’s Innocents Listed by Handala Ransomware Group

On April 5, 2026, the Handala Hack group defaced the websites of 27 companies and exfiltrated internal files in a ransomware operation explicitly tied to the conflict in Gaza.

What Public Reporting Shows

Public reporting on the Handala leak site describes the incident as retaliation for what the group calls “the innocent blood of Minab’s children.” The attackers compromised and defaced websites belonging to 27 organizations they label as Zionist companies. Internal files were allegedly stolen during the ransomware attack, although the exact number of people whose data was exposed remains unknown. Available reporting indicates the group posted proof of the exfiltration on their leak site hosted at handala-hack.tw.

The operation follows the group’s pattern of mixing political statements with data theft. No specific customer or employee records have been publicly detailed in the initial leak, but the theft of internal files typically includes spreadsheets, emails, contracts, and employee information that can later surface in doxxing campaigns.

Why This Matters for You and Your Family

When a ransomware group steals internal files from dozens of companies at once, the data often contains personal details that reach far beyond corporate walls. If you or anyone in your household has ever worked at, done business with, or had an account linked to one of those 27 organizations, your information could already be in the hands of attackers who have shown willingness to publish it.