Skip to content
Ransomware

Handala claims to have leaked data belonging to Laura Gilinski

The Handala group claims to have leaked over 100,000 emails and various corporate documents allegedly belonging to Laura Gilinski.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Handala
  • Country: Israel
  • Announcement date: March 15, 2026

The threat actor known as Handala has announced a significant data breach involving Laura Gilinski. According to an announcement made on a leak site on March 15, 2026, the group claims to have exfiltrated and published a vast amount of sensitive information belonging to Gilinski.

The claims made by Handala

The Handala group released an announcement on March 15, 2026, claiming that it has successfully leaked data belonging to Laura Gilinski. The group asserts that the leaked information contains strategic data linked to both Mossad and the Institute for National Security Studies (INSS). To support these claims, the group provided links intended for downloading the contents of various emails and various operational documents.

In the context of modern cyber threats, such actions are often associated with double extortion tactics. In these scenarios, threat actors do not merely encrypt an organization's data to demand a ransom, but they also steal sensitive information to threaten its public release. This pressure is used to coerce victims into paying, as the exposure of confidential data can cause irreparable reputational and operational damage.

The alleged contents of the leak

The information allegedly leaked by the Handala group is extensive, reportedly including over 100,000 emails. The group claims that the stolen data encompasses a wide variety of sensitive materials, including:

  • Email correspondence
  • Financial reports
  • Operational documents
  • Personal contact information

The release of such a high volume of data, particularly when it involves internal correspondence and operational plans, presents a significant security challenge for the targeted individual and the associated institutions.

About Laura Gilinski

Laura Gilinski is a figure serving as the Deputy Director at the Institute for National Security Studies (INSS), an Israel-based think tank. The INSS is a prominent research center that produces strategic analyses on Israel's national security and foreign policy issues.

Implications and potential risks

Given the nature of the alleged data, this leak may contain highly sensitive information and could have negative impacts on the safety of the individuals involved. At the institutional level, the exposure of strategic operational plans may complicate the organization's activities and international relations. Considering that the Handala group is assessed to have links to Iran, this action may be part of a politically motivated cyber operation.

The exposed data could be utilized for secondary risks such as spear-phishing and social engineering attacks. In these types of attacks, the stolen personal contact information and internal correspondence are used to craft highly convincing messages designed to trick individuals into revealing further secrets or granting unauthorized access to secure systems.

Furthermore, the scale and content of the leak may lead to scrutiny regarding the data protection policies and security measures of the involved organizations. To defend against such threats, organizations typically focus on implementing robust security frameworks, such as multi-factor authentication, regular security awareness training for staff, and rigorous monitoring of network traffic to detect unauthorized data exfiltration. Maintaining strict access controls and ensuring that sensitive strategic information is encrypted both at rest and in transit are also fundamental defensive steps in mitigating the impact of potential breaches.

From the Essential plan

Third-Party Risk

Monitor leaks on your suppliers’ domains and identify at-risk suppliers at an early stage.

Related stories