SolidCAM 2024 SP0 Listed by handala Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware and hacktivist operations continue to target industrial software providers, where access to design systems and manufacturing data can disrupt supply chains and expose proprietary work. Listings on leak sites remain a common pressure tactic, even when independent confirmation of the intrusion or the full scope of data loss is still pending.

On June 17, 2024, the group known as handala listed SolidCAM 2024 SP0, claiming a ransomware attack that involved the exfiltration of internal files. The number of people affected is unknown, and public detail on timing, method, and exact contents remains limited. The listing itself is a claim by the group and has not been independently verified in the available record.

What happened

According to the reported summary, handala announced that it had compromised the SolidCAM network and exfiltrated internal files in a ransomware attack. The group further claimed that more than a week had passed since its announcement and that the victim had not removed the group’s backdoor from its network and infrastructure. The precise date of the initial intrusion, the technical method used, the volume of data taken, and any ransom demand are not disclosed in the public facts. The number of individuals potentially affected is listed as unknown. The only concrete assertion available is the group’s own leak-site listing and accompanying statement.

The group behind it: handala

Handala is a publicly documented pro-Palestinian hacktivist collective that has repeatedly claimed responsibility for cyber operations against Israeli and Israel-linked organizations. The group typically combines data theft with public leak-site postings and politically charged messaging. Its operations often emphasize persistence after initial access, including claims of leaving backdoors, and it has previously targeted technology, industrial, and government-adjacent entities. In this case the group claims it hacked the SolidCAM network, exfiltrated internal files, and left a backdoor that remained active more than a week later. Those statements are claims made by handala; they have not been independently confirmed by the facts provided.

Who is SolidCAM 2024 SP0?

SolidCAM is a commercial CAD/CAM software provider whose products are used by manufacturers for computer-aided design and computer-aided manufacturing, particularly CNC machining and production engineering. The designation “SolidCAM 2024 SP0” appears in the listing as the named organization or product line. Companies of this type typically hold source code or binaries, customer and partner contact data, licensing records, engineering drawings, and internal operational documents. A breach affecting such an organization is consequential because it can expose proprietary manufacturing know-how, disrupt customers who rely on the software for production, and create secondary risks if credentials or design files are reused across industrial environments.

The information in question

The facts state that internal files were exfiltrated in a ransomware attack. No further breakdown of file types, databases, or personal data categories is provided, and the number of people affected is unknown. Organizations in the industrial-software sector commonly store engineering data, customer lists, support tickets, employee records, and system credentials. Because the exact contents of the exfiltrated material are not disclosed, it is not possible to confirm whether personal information, financial records, or source code were among the files taken. Readers should treat any specific data-type claims beyond “internal files” as unconfirmed.

The real-world impact

For individuals whose contact or account details may have been present in internal systems, the primary risks are phishing, credential stuffing, and social-engineering attempts that reference the company or its products. For the organization, the claimed persistence of a backdoor raises the possibility of continued unauthorized access until systems are fully remediated. Customers and partners who integrate SolidCAM software into manufacturing workflows may face operational uncertainty if design files or licensing data were compromised. Because the scale of the breach and the precise data types remain undisclosed, the full extent of harm cannot yet be quantified; the practical consequence is heightened vigilance rather than confirmed mass identity theft.

What to do if you're exposed

If you have an account, support relationship, or employment history with SolidCAM or related manufacturing partners, take the following practical steps:

• Change passwords for any accounts that may have been reused or linked to the company, and enable multi-factor authentication where available.
• Monitor email and messaging for phishing that references SolidCAM, CNC software, or recent “security updates.”
• Review bank and credit statements for unexpected activity if financial or billing data could have been stored.
• Treat unsolicited requests for credentials or remote-access software as suspicious until verified through official channels.
• Run a free exposure scan of your email address against known breach data sets to see whether your information has already appeared in public dumps.

Public detail on this incident remains limited to the group’s listing and statement. Continued monitoring of official company notices and reputable breach-tracking sources is the most reliable way to learn whether additional confirmed information becomes available.

AICompiled with AI assistance from public sources and published under our editorial standards.