Intellinews Iranian Hackers Breach Former IDF Chief's Personal Data, Leak 19,000 Files
Article Content
- •Handala leaked over 19,000 files from former IDF Chief of Staff Herzi Halevi's personal devices.
- •The leaked materials include sensitive military documents and personal information.
- •This incident highlights ongoing Iranian cyber operations against Israeli security officials.
On April 9, 2026, the Iranian-linked hacking group Handala announced it had breached the personal devices of former Israeli Chief of Staff Herzi Halevi, leaking over 19,000 sensitive files. The leaked materials include private photos, videos, and documents from Halevi's phone, showcasing meetings with Arab officials and U.S. military leaders. Handala claimed to have maintained access to Halevi's system for years, suggesting a long-term infiltration. The leaked content also features personal details, including family photos and ID documents. This incident marks a significant escalation in cyber operations targeting Israeli security officials, following previous leaks involving other high-ranking figures. The Shin Bet has raised concerns over Iran's intelligence-gathering efforts, which have resulted in espionage charges against several Israeli citizens. The IDF has not publicly commented on the breach, which is seen as one of the most severe cyber incidents involving a senior figure in Israel's military. Handala has previously targeted various Israeli officials, indicating a pattern of state-sponsored cyber operations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (10)
Following this threat?
Track handala and Stryker Corporation in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…