Handala Claims Breach of Mossad-Linked Financial and Research Communications
Threat Actor Intelligence · 3 sources · Updated 4mo ago · First seen Mar 17, 2026

The main event is Handala Hack's claimed compromise of Mossad-linked personnel and systems, including an alleged leak of more than 50,000 confidential emails and documents tied to Ilan Steiner, described as a former Mossad budget director and current CFO of Israel’s National Security Institute. The post frames the material as exposing financial flows, operational planning, research activity, and support networks allegedly connected to Israeli intelligence operations across the region. This is not fluff: despite the propagandistic tone and lack of independent verification in the source material, it is a concrete claim of a cyber intrusion and data leak with potential intelligence and security implications.
A second Handala post appears related to the same broader campaign, naming Mir Vahid Hassantabar ("Vahid Online") and his brother Navid Hassantabar as alleged Mossad-linked actors and claiming the group identified the team's geographic location and prior involvement in cyber sabotage against an Iranian bank. That reference is relevant because it fits the same Handala operation targeting alleged Israeli or anti-Iranian networks, though it is more of a doxing/accusation post than a direct technical disclosure. The Substack article about British and American information operations in Libya is not about the same incident and should be excluded as a separate historical intelligence story.


