Iranian Hackers Leak IDF Spokesperson’s Private Information
The "Handala" hacking group claims to have breached the "Zionist Army’s" accounts, leaking names and phone numbers; IDF downplays the incident as a "recycled" six-month-old breach while issuing emergency security protocols to all personnel.
The Iranian-linked hacking group Handala has published sensitive information allegedly harvested from the personal mobile phone of an officer serving in the IDF Spokesperson’s Unit.
The leak, which appeared on X and Instagram, includes a treasure trove of personal data, including full names and phone numbers of contacts, as well as internal documents analyzing media trends and "situation assessments."
The IDF was quick to respond to the breach, characterizing it as a piece of psychological warfare designed to demoralize the public rather than a fresh intelligence failure.
According to military officials, the breach actually occurred six months ago and is only being recirculated now to capitalize on the heightened tensions of the current war.
In an official statement, the IDF Spokesperson said:
"A preliminary investigation indicates this is a past event being redistributed, not a recent breach. There is no suspicion of a breach to national security information. Following the publication of the phone list, information security procedures have been reinforced for all personnel."
The Leak: What was Exposed?
The hackers claimed to have gained access to "Zionist Army" accounts, obtaining information on "spies within the Axis of Resistance countries." While the IDF denies any "spies" were compromised, the leak did include:
- Contact Lists: Names and direct lines of current and former unit members.
- Internal Analysis: Texts analyzing how the media views specific military operations.
- Secondary Breaches: Concerns that a second device belonging to a specific department within the Spokesperson’s Unit may also have been compromised in the original hack.
Despite downplaying the severity, the IDF isn't taking chances. An internal memo was blasted to commanders across the unit with strict "cyber hygiene" orders:
- Do not answer calls from unrecognized numbers.
- Do not click on suspicious links sent via messaging apps.
- Block and report any approaches from unverified identities.
One former soldier whose details were included in the leak told ynet she was never officially notified by the military and only found out through the grapevine, eventually turning to the National Cyber Directorate for help.