Hebrew University of Jerusalem Listed by handala Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Hebrew University of Jerusalem was listed by the handala ransomware group on March 13, 2026, with internal files reported as exfiltrated. Individuals connected to the university should check for any official notices and take recommended security steps.
Inside the incident
Public reporting on the incident remains limited to the group’s listing of the university. The claim states that internal files were taken during a ransomware attack, but no independent confirmation of the breach, the volume of data, or the method of access has been made available. The number of people whose information may be involved is not known.
Who is handala?
Handala is a hacktivist group that has publicly claimed responsibility for operations against Israeli-linked targets. The group has used ransomware tactics in some incidents and has posted stolen material on leak sites to draw attention to its actions. Its listings are presented as claims by the group and are not automatically verified by third parties.
About Hebrew University of Jerusalem
The Hebrew University of Jerusalem is a major public research university in Israel. Institutions of this type maintain large volumes of administrative records, research data, and personal information belonging to students, faculty, and staff. A compromise at such an organisation can affect both institutional operations and the privacy of individuals connected to its systems.
What data was at risk
The listing refers to internal files exfiltrated in a ransomware attack. The precise categories of data involved have not been disclosed. Universities routinely hold records that can include student and employee identifiers, academic records, research materials, and financial or contact information; however, the exact contents of the claimed exfiltration remain unconfirmed.
The real-world impact
Exposure of internal university files can create risks of identity misuse, targeted phishing, or unauthorised access to research projects. For the organisation, the incident may lead to operational disruption and the need for extended forensic review. Without Reported Details on the data types or scale, the full extent of consequences for individuals cannot yet be assessed.
If your data was in this claimed breach
Monitor accounts linked to the university for unusual activity and enable multi-factor authentication where available. Review any official notices issued by the institution for guidance on specific steps. Individuals can also run a free exposure scan of their email address against known breach data to check for prior appearances in public records.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
From Hunter to Hunted: Mossad’s Former Chief Falls into the Trap Listed by handala Ransomware GroupBehind the Curtain: Full Details of Shin Bet’s Iran Desk Officers Released Listed by handala Ransomware GroupMossad’s Secret Treasury Exposed: 50,000 Confidential Emails Leaked Listed by handala Ransomware GroupShock for Israeli Intelligence: 100,000 Classified Emails of Mossad’s Ex-Deputy Director S... Listed by handala Ransomware GroupLatest breaches
Publicly posted by handala — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.