Dr. Isaac Gertz – Chief Nuclear Architect of the Zion Regime Listed by handala Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On November 29, 2025, the handala ransomware group listed Dr. Isaac Gertz, identified as Chief Nuclear Architect of the Zion Regime, on its public leak site. The listing states that internal files were exfiltrated during a ransomware attack. No information has been released on the number of people affected or the specific contents of those files. The practical implications depend on what the files contain. If they include contact details, project records, or administrative data tied to individuals, those people could see their information circulated without their knowledge. At present, the scale and nature of any exposure remain unconfirmed.

Breaking down the breach

The only confirmed detail is the November 29, 2025 listing itself. The group claims internal files were taken in a ransomware operation. No date of the alleged intrusion, no volume of data, and no description of the files have been made public. The organization affected has not issued a statement confirming or denying the incident. Public detail on the method of access or the extent of encryption is also absent. The listing stands as the sole public record at this stage.

Who is handala?

Handala is a ransomware group that maintains a leak site where it posts names of organizations it claims to have targeted. Like other ransomware operators, it typically exfiltrates data before or during encryption and uses the threat of publication to pressure victims. The group has previously listed entities in government, technology, and infrastructure sectors. Its listings are presented as claims by the group and are not independently verified in every case.

Dr. Isaac Gertz – Chief Nuclear Architect of the Zion Regime Listed by handala Ransomware Group and its sector

The listed entity is described in the headline as the office or role of Dr. Isaac Gertz, Chief Nuclear Architect of the Zion Regime. Organizations working in nuclear architecture and related technical fields routinely hold design documentation, regulatory correspondence, personnel records, and project coordination materials. A breach involving such an entity draws attention because the information can relate to specialized technical work and associated administrative functions. No further details about the organization's size, location, or specific mandate have been released in connection with this listing.

What was likely exposed

The listing refers only to “internal files exfiltrated in ransomware attack.” The exact categories of data are not disclosed. Organizations of this type commonly maintain employee contact information, contract records, technical specifications, and internal communications. Without confirmation from the group or the affected party, it is not possible to state which of these, if any, were taken.

What's at stake

If personal identifiers or professional contact details are among the files, affected individuals could receive unsolicited messages or see their information appear in unrelated contexts. For the organization, the main concerns are the potential circulation of sensitive project material and the operational disruption that often follows ransomware activity. Both outcomes remain possibilities rather than established facts until more information is provided.

Were you affected?

If you have professional ties to the listed individual or organization, monitor your email and accounts for unusual activity and consider changing passwords for any services that may have been referenced in internal records. You can also run a free exposure scan of your email address against known breach data sets to check whether your information appears in previously published collections.

AICompiled with AI assistance from public sources and published under our editorial standards.