Ransomware Group: HANDALA

VICTIM NAME: Y[.]G[.] New Idan

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the HANDALA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page reports a significant security breach involving Y.G. New Idan Ltd, an organization associated with Israel’s Ministry of War. The breach was publicly disclosed on June 14, 2025, and the attackers claim to have compromised 339 gigabytes of highly sensitive and classified data. The company is responsible for designing and constructing military bases, and the leak potentially exposes critical information related to national security. The threat actors have announced that the stolen data will be leaked publicly soon, posing serious security and strategic risks. The leak includes screenshots of sensitive internal documents, emphasizing the severity of the breach.

The leak’s presentation suggests that the attackers have targeted a high-value defense entity, and the statement indicates the possibility of future public disclosures of contained data. The compromised data may include confidential military information or plans, though specific details are not disclosed to protect the sensitive nature of the content. The breach’s discovery was recorded on June 14, 2025, and the post includes a screenshot of the leaked data. The incident underscores the ongoing risks posed by cybercriminal groups targeting government and defense organizations, emphasizing the importance of cybersecurity measures in sensitive sectors.