Israel Institute for National Security Studies targeted by handala group

• Ransomware group: handala
• Country: Israel
• Sector: Government & Defense
• Announcement date: March 4, 2026

The Israel Institute for National Security Studies (INSS) has been named in a recent leak announcement published by the handala group. The announcement, which surfaced on March 4, 2026, claims that the institution has been the subject of a data breach.

Details of the claimed attack

According to the announcement released by the handala group, the group claims to have conducted an attack against the Israel Institute for National Security Studies on March 4, 2026. In making this claim, the group utilized rhetoric that was critical of the institution's work regarding national security studies. While the group has publicized this incident on a leak site, they did not provide specific details regarding a ransom demand or the total volume of the data they claim to have exfiltrated.

Ransomware groups often use leak sites to apply pressure on their targets through a tactic known as double extortion. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also threaten to release sensitive information publicly to coerce the victim into paying a ransom. By publishing an announcement, the group aims to damage the reputation of the target or force a negotiation. However, in this specific instance, the group has not provided any screenshots to support their claims or to demonstrate the contents of the alleged breach.

Data and information involved

The announcement made by the handala group does not specify the nature of the leaked data. Furthermore, there is no information available regarding the specific file types or the total quantity of data involved in the alleged incident. The listing names no specific data types.

About the Israel Institute for National Security Studies

The Institute for National Security Studies (INSS) is a leading independent think tank located in Israel. The organization is dedicated to conducting academic research and analysis on various critical topics, including national security, strategy, military affairs, and foreign policy.

Analysis and potential risks

This incident may be part of the broader activities conducted by the handala group when targeting institutions based in Israel. Given the specific position of the INSS within the defense and national security sector, there is a possibility that the data involved in such a breach could contain sensitive strategic information. The potential exposure of such information carries significant implications for national security interests.

Beyond the immediate loss of data, such incidents can lead to secondary risks for the institution. These risks include targeted phishing campaigns or identity theft aimed at the institution's employees and associated stakeholders. When sensitive organizational data is leaked, attackers often use the information to craft highly convincing social engineering attacks to gain further access to secure networks.

Furthermore, the institution may face legal processes within the framework of Israeli data protection regulations following the breach. Organizations operating in high-stakes sectors like defense and national security must remain vigilant against such threats. Common defensive steps for organizations include implementing robust multi-factor authentication, maintaining strict network segmentation to limit lateral movement, and conducting regular security awareness training to help employees recognize phishing attempts. While public information regarding the handala group remains limited, the incident highlights the ongoing threat posed by groups targeting strategic research and defense institutions.