EPS Tech R&D Listed by handala Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On August 25, 2024, the ransomware group known as handala listed EPS Tech R&D on its leak site, claiming to have exfiltrated internal files in a ransomware attack. Public reporting confirms only that the organization was named by the group and that the actors described the material as internal files; the number of people affected remains unknown, and independent verification of the full scope has not been established in available records.

The listing matters because it places a research-and-development organization—potentially holding sensitive technical material—into the public view of a known threat actor. What follows is limited to the What's Publicly Reported of the listing and established public context about the actor and sector; no additional details of compromise method, exact volume, or confirmed contents have been disclosed beyond the group’s own statements.

Inside the incident

According to the available record, EPS Tech R&D was listed by handala on August 25, 2024. The group stated that internal files had been exfiltrated during a ransomware attack and, for the first time as a proof of concept, claimed to be publishing a number of top-secret documents related to the design of electronic equipment used by the Zionist Air Force. The group’s message also included a password (“handala”) for a download and warned of further releases. No independent confirmation of the attack vector, the precise date of intrusion, the total volume of data, or the identities of any affected individuals has been provided in the public facts. The number of people affected is listed as unknown.

Timing, scale, and technical method remain undisclosed outside the group’s leak-site claim. The incident is therefore known primarily through the actor’s assertion that it successfully obtained and began releasing internal material from the organization.

The group behind it: handala

Handala is a publicly documented ransomware and hacktivist group that has repeatedly targeted organizations it associates with Israeli interests. The group typically operates by claiming network access, exfiltrating data, and then listing victims on leak sites while threatening or staging partial releases to pressure targets. Its communications often mix political messaging with technical claims of compromise. Prior activity attributed to handala in open reporting has focused on Israeli government, defense-adjacent, and commercial entities, frequently accompanied by statements framing the operations as resistance actions.

In this case the group claims to have taken internal files from EPS Tech R&D and to be releasing selected documents as a proof of concept. Those assertions originate solely from the group’s own listing and accompanying text; they have not been independently verified in the facts provided. Readers should treat the specific content descriptions and the “top-secret” characterization as claims made by the actor rather than established fact.

About EPS Tech R&D

EPS Tech R&D is an organization engaged in technology research and development. Public detail on its precise corporate structure, size, or client list is limited in the available record. Organizations of this type commonly work on electronic systems, components, or specialized equipment and may hold design files, technical specifications, project documentation, and related internal records. Given the sector, such material can include proprietary engineering data and, in some cases, information relevant to defense or aerospace applications.

A breach involving an R&D entity is consequential because the data typically held—design documents, test results, supplier information, and internal communications—can be of interest both to commercial competitors and to threat actors seeking strategic or political leverage. The handala listing specifically frames the material as related to electronic equipment design, which, if accurate, would place the incident in a sensitive technical domain. No public confirmation of the organization’s exact role or client relationships appears in the facts beyond the group’s claim.

The information in question

The facts state that the exposed material consists of internal files exfiltrated in a ransomware attack. The group further claims these include top-secret documents for the design of electronic equipment used by the Zionist Air Force and has referenced a downloadable package protected by the password “handala.” No inventory of file types, document titles, personal data categories, or total volume has been independently confirmed.

Organizations engaged in electronic-equipment R&D typically maintain design schematics, component specifications, simulation data, project timelines, supplier contracts, and internal correspondence. Whether any of those categories—or any personal information of employees, partners, or clients—were among the files remains unconfirmed. The exact contents are therefore known only through the actor’s unverified statements.

The real-world impact

For individuals whose information may have been present, the primary risks are those common to any internal-file exposure: potential misuse of contact details, credentials, or personal identifiers if such data were included, and the possibility of secondary social-engineering attempts that reference the organization. Because the number of people affected is unknown and the precise data types beyond “internal files” are unconfirmed, the concrete personal impact cannot yet be quantified.

For the organization itself, the listing creates operational and reputational pressure. Even partial public release of design-related material can affect competitive position, contractual relationships, and regulatory scrutiny. The group’s explicit threat of further releases adds an ongoing uncertainty that may require sustained incident-response and monitoring efforts. No dollar figures, confirmed customer losses, or verified system downtime have been reported in the facts.

If your data was in this claimed breach

If you have a past or present connection to EPS Tech R&D—as an employee, contractor, partner, or client—treat the possibility of exposure seriously even though the exact contents remain unconfirmed. Change passwords associated with any accounts that used company email or systems, enable multi-factor authentication where available, and monitor financial and identity accounts for unusual activity. Be cautious of unsolicited messages that reference the organization or claim to possess internal documents.

You can also run a free exposure scan of your email address against known breach data sets to check whether your information has already appeared in publicly catalogued incidents. Continue to follow official statements from the organization or relevant authorities for any confirmed guidance specific to this event.

AICompiled with AI assistance from public sources and published under our editorial standards.