Handala Hacktivists Detail Breach of Israeli Security Institute

JERUSALEM — The Handala hacktivist group disclosed on Monday how it infiltrated the security systems of Israel's Institute for National Security Studies (INSS), gaining access to classified data in a multi-year operation. The group released technical details outlining the methods used to penetrate the institute's defenses, marking a significant escalation in cyber operations targeting Israeli state institutions.

The disclosure, made public on May 5, 2026, describes a prolonged campaign that began years ago and culminated in the extraction of sensitive documents. Handala stated the operation was designed to expose Israeli intelligence activities and reveal classified information to the public. The group did not specify the exact volume of data compromised or the specific nature of the documents involved, though they indicated the material included internal assessments and strategic planning documents.

The INSS, a leading think tank closely tied to Israel's defense establishment, has not issued an official statement regarding the breach. Israeli security officials have historically faced challenges from various cyber groups, but this incident represents one of the most detailed public accounts of a successful intrusion into a high-level security research body. The institute's work often informs government policy on national security matters, making the potential exposure of its internal data a matter of significant concern.

Handala's release included screenshots and technical logs purportedly from within the INSS network. The group claimed to have maintained persistent access to the system for an extended period, allowing them to gather intelligence over time. While the group did not release the actual classified documents in the initial disclosure, they indicated that further materials would be made available in subsequent releases.

Cybersecurity experts note that the level of detail provided in the disclosure suggests a sophisticated operation. The methods described involve advanced social engineering techniques and the exploitation of unpatched vulnerabilities in the institute's external-facing systems. However, without independent verification of the technical claims, the full scope of the breach remains unclear.

The incident has raised questions about the effectiveness of Israel's cybersecurity protocols and the potential for similar attacks on other government entities. Security analysts are monitoring the situation closely, awaiting any official response from Israeli authorities or further actions from the Handala group. The group has not commented on whether the breach was conducted independently or in coordination with other actors.

As of Monday evening, no official confirmation of the breach has been issued by the INSS or the Israeli government. The situation remains fluid, with cybersecurity firms and government agencies likely conducting internal investigations to determine the extent of the compromise. The potential impact on ongoing security operations and diplomatic relations remains to be seen.