Full Access: Jerusalem’s Security Cameras in Handala’s Hands Listed by handala Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Breaking down the breach

The incident was first noted through the group’s leak-site posting on March 09, 2026. The listing asserts that internal files were taken during a ransomware attack on the systems associated with Jerusalem’s security cameras. No independent confirmation of the volume of data, the exact intrusion method, or the timeline of access has been made public. The number of people whose information may be involved is currently unknown.

The group behind it: handala

Handala is a ransomware operation that has appeared in public reporting since at least 2023. Like other groups in this category, it typically gains initial access through common vectors such as compromised credentials or unpatched systems, then deploys encryption while also copying files for later leverage. The group maintains a leak site where it lists victims that have not met its demands. Its listing of Full Access constitutes the group’s claim; no separate verification of the underlying access has been published by authorities or the organization itself.

Who is Full Access: Jerusalem’s Security Cameras in Handala’s Hands Listed by handala Ransomware Group?

Full Access is the entity identified in the listing as responsible for aspects of Jerusalem’s municipal and security camera network. Organizations of this type manage video surveillance infrastructure that supports public safety and urban monitoring. Such operators routinely handle live and recorded footage, system logs, network credentials, and maintenance records. A compromise in this sector can affect both operational continuity and the privacy of individuals whose movements are captured by the cameras.

What data was at risk

The only data type named in available reporting is “internal files exfiltrated in ransomware attack.” The precise contents of those files have not been disclosed. Entities that operate city-wide camera systems commonly store video recordings, access-control logs, configuration files, and administrative correspondence. Without a published inventory, it is not possible to confirm which categories, if any, were taken.

Why it matters

Surveillance systems in a major city hold information that can reveal patterns of movement for residents, visitors, and public officials. Exposure of internal files could provide insight into camera placement, retention policies, or network architecture. For individuals, the primary concern is the potential for footage or associated metadata to circulate beyond its original purpose. For the operator, the incident raises questions about the security of critical monitoring infrastructure, though the operational impact has not been detailed publicly.

Were you affected?

At present there is no public list of exposed records or a notification process tied to this listing. Individuals concerned about their information appearing in known breach data can run a free exposure scan using their email address through established breach-monitoring services. Organizations should review any official statements issued by Full Access and follow standard guidance on monitoring accounts for unusual activity.

AICompiled with AI assistance from public sources and published under our editorial standards.