Israel
ILRansomware victim intelligence profile · Ranked #20 globally · Updated: Sep 5, 2026
ThreatAI Analysis
Compiled from this database and the ransomware.live profiles of the groups active in Israel. Figures are computed from the tracked records, not inferred.
With ransomware activity against Israel recorded for 141 incidents globally ranking as the 20th most targeted nation, key perpetrators include Handala, Qilin, and Funksec while technology, public sector, and business services suffer disproportionately.
Israel in the global picture
Israel accounts for 141 of the ransomware disclosures tracked here, ranking #20 worldwide and making up 0.7% of the global total. The sectors listed most often are Technology, Public Sector, Business Services.
Who is most active in Israel
Handala — 70 victims in Israel. Not a Ransomware Group. Qilin — 7 victims in Israel. Qilin ransomware was first observed in July of 2022. Funksec — 6 victims in Israel.
Where to report an incident in Israel
- Israeli Government CERT · [email protected] · website
National computer emergency response teams for Israel, as registered with ENISA and the teams themselves. Regional, sectoral and vendor response teams are excluded; verify current contact details before relying on them in an incident.
Ransomware Threat Profile: Israel
Israel ranks #20 globally for ransomware attacks, with 141 confirmed victims in this database — representing 0.7% of the worldwide total. The most active ransomware groups targeting Israel include Handala, Qilin, Funksec.
The most frequently targeted industries in Israel are Technology, Public Sector, Business Services. The healthcare sector is particularly vulnerable because attacks on hospitals and medical providers can create life-threatening situations, increasing pressure to pay ransoms quickly.
Israel's attack volume reflects broader trends in ransomware targeting: the volume of attacks reflects the country's integration into the global economy and the proliferation of ransomware operations that target organisations of all sizes worldwide.
Organisations in Israel should consider the active threat groups documented here when assessing their cybersecurity posture, implementing detection rules, and prioritising incident response planning.
Recent Victims in Israel (showing 100 of 141)
| # | Organization | Group | Sector | Date |
|---|---|---|---|---|
| 1 | NovoCure Limited | Shinyhunters | Healthcare | Aug 22, 2026 |
| 2 | Yad Vashem Museum ! | Nasirsecurity | Education | Aug 22, 2026 |
| 3 | Serruya private equity | Coinbasecartel | Financial Services | Aug 14, 2026 |
| 4 | hanan-hov.co.il | Safepay | Other | Aug 3, 2026 |
| 5 | Lumenis Ltd. | Shinyhunters | Technology | Aug 2, 2026 |
| 6 | Amicell | Thegentlemen | Healthcare | Jul 31, 2026 |
| 7 | Efrata College of Education | Thegentlemen | Education | Jul 31, 2026 |
| 8 | eitzchaim.com | Krybit | Other | Jul 17, 2026 |
| 9 | FWMK Law Offices | Dragonforce | Business Services | May 27, 2026 |
| 10 | Belz Institutions | Qilin | — | May 13, 2026 |
| 11 | Magnolia (Israel) | Medusalocker | — | May 5, 2026 |
| 12 | guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP) | Vect | Technology | Apr 15, 2026 |
| 13 | Behind the Curtain: Full Details of Shin Bet’s Iran Desk Officers Released | Handala | — | Mar 25, 2026 |
| 14 | From Hunter to Hunted: Mossad’s Former Chief Falls into the Trap | Handala | — | Mar 25, 2026 |
| 15 | Mossad’s Secret Treasury Exposed: 50,000 Confidential Emails Leaked | Handala | — | Mar 17, 2026 |
| 16 | palram.com | Killsec | Manufacturing | Mar 17, 2026 |
| 17 | Shock for Israeli Intelligence: 100,000 Classified Emails of Mossad’s Ex-Deputy Director S... | Handala | Public Sector | Mar 16, 2026 |
| 18 | Hebrew University of Jerusalem | Handala | Education | Mar 13, 2026 |
| 19 | Tamir Hayman | Handala | — | Mar 13, 2026 |
| 20 | Raz Zimmt (head of the Iran Desk at Israeli security institutes) | Handala | — | Mar 12, 2026 |
| 21 | shlomo bit | Killsec | — | Mar 11, 2026 |
| 22 | Unprecedented Disclosure of 50 Senior Israeli Air Force Officers’ Information | Handala | Public Sector | Mar 9, 2026 |
| 23 | Israeli Weather Stations Crippled | Handala | Public Sector | Mar 8, 2026 |
| 24 | Jerusalem Water Supply Facilities | Handala | Public Sector | Mar 7, 2026 |
| 25 | Atlas Insurances Ltd | Handala | Financial Services | Mar 5, 2026 |
| 26 | ELC Security Products | Qilin | — | Mar 5, 2026 |
| 27 | Israel Institute for National Security Studies (INSS) | Handala | Public Sector | Mar 4, 2026 |
| 28 | Israel Opportunity Energy | Handala | Energy | Mar 2, 2026 |
| 29 | http://ramet-trom.co.il/ | Incransom | Manufacturing | Mar 1, 2026 |
| 30 | Clalit: Israel’s Largest Healthcare Organization Falls to Cyber Resistance | Handala | Healthcare | Feb 25, 2026 |
| 31 | Abrahamsom Center | Nightspire | Education | Feb 14, 2026 |
| 32 | b2motorsport.co.il | Tengu | Consumer Services | Jan 29, 2026 |
| 33 | Magen Eco Energy | Thegentlemen | Energy | Jan 20, 2026 |
| 34 | Shtainmetz Aminoach | Thegentlemen | Business Services | Jan 20, 2026 |
| 35 | ipu.co.il | Safepay | Technology | Jan 19, 2026 |
| 36 | TaLachaim | Qilin | — | Dec 31, 2025 |
| 37 | Bibi Gate: The Gatekeeper’s Fall | Tzachi Braverman | Handala | Public Sector | Dec 28, 2025 |
| 38 | Telechaim | Qilin | — | Dec 18, 2025 |
| 39 | Tlechaim | Qilin | — | Dec 18, 2025 |
| 40 | Operation Octopus: Naftali Bennett | Handala | — | Dec 17, 2025 |
| 41 | Plonter | Handala | Technology | Dec 11, 2025 |
| 42 | Slimsoft | Spacebears | Technology | Dec 5, 2025 |
| 43 | avrind.com | Incransom | Technology | Nov 13, 2025 |
| 44 | Izaki Group Investments | Qilin | Financial Services | Oct 27, 2025 |
| 45 | Taldor | Nasirsecurity | Technology | Oct 12, 2025 |
| 46 | Israel Fuel System | Handala | Energy | Oct 10, 2025 |
| 47 | www.hameshakem.co.il | Devman | — | Oct 3, 2025 |
| 48 | Shamir Medical Center | Qilin | Healthcare | Oct 2, 2025 |
| 49 | Amos Spacecom | Handala | Technology | Sep 27, 2025 |
| 50 | transelectric.co.il | Safepay | Telecommunication | Aug 19, 2025 |
| 51 | Panorama | Spacebears | Business Services | Aug 17, 2025 |
| 52 | KMDI | Sinobi | Manufacturing | Jul 29, 2025 |
| 53 | Niflaot Hatzuna Ltd | Handala | Agriculture and Food Production | Jul 4, 2025 |
| 54 | Ivri, Kerner & Co | Handala | Business Services | Jul 2, 2025 |
| 55 | hubermanlaw.co.il | Lynx | Business Services | Jun 26, 2025 |
| 56 | Israel Job Info Ltd | Handala | Business Services | Jun 23, 2025 |
| 57 | Shelter Locations in Israel | Handala | Public Sector | Jun 23, 2025 |
| 58 | Ben Horin & Alexandrovitz Ltd | Handala | Business Services | Jun 22, 2025 |
| 59 | Zacharia Levi Ltd | Handala | Construction | Jun 21, 2025 |
| 60 | Kibbutz Almog | Handala | Agriculture and Food Production | Jun 20, 2025 |
| 61 | Saban Systems | Handala | Technology | Jun 19, 2025 |
| 62 | Agura B.C LTD | Handala | Technology | Jun 18, 2025 |
| 63 | Mor-logistics | Handala | Transportation/Logistics | Jun 18, 2025 |
| 64 | Weizmann Institute of Science | Handala | Education | Jun 18, 2025 |
| 65 | TBN Israel | Handala | Telecommunication | Jun 16, 2025 |
| 66 | Israel’s fuel supply system Data | Handala | Energy | Jun 15, 2025 |
| 67 | Israel’s fuel supply system | Handala | Energy | Jun 14, 2025 |
| 68 | Y.G. New Idan | Handala | Public Sector | Jun 14, 2025 |
| 69 | modiin-ezrachi.co.il | Babuk2 | — | Mar 29, 2025 |
| 70 | israel Infrastructure & Secret Documents intelligence information | Babuk2 | Public Sector | Mar 26, 2025 |
| 71 | knesset.gov.il | Babuk2 | Public Sector | Mar 15, 2025 |
| 72 | footballticketnet.com | Funksec | Consumer Services | Feb 18, 2025 |
| 73 | lavi.co.il | Incransom | Technology | Feb 18, 2025 |
| 74 | Israel Police | Handala | Public Sector | Feb 9, 2025 |
| 75 | rattelacademy.com | Funksec | Education | Feb 5, 2025 |
| 76 | Devlion | Fog | — | Feb 4, 2025 |
| 77 | Israel Ministry of National Security | Handala | Public Sector | Jan 29, 2025 |
| 78 | Reutone | Handala | Technology | Dec 25, 2024 |
| 79 | 2sign.co.il | Funksec | Technology | Dec 24, 2024 |
| 80 | 10M israeli data for sell | Funksec | Technology | Dec 23, 2024 |
| 81 | kfar-yona.muni.il | Funksec | Public Sector | Dec 23, 2024 |
| 82 | planetgroup.co.il | Ransomhub | Technology | Dec 20, 2024 |
| 83 | GNS Cloud | Handala | Technology | Dec 16, 2024 |
| 84 | www.brachapundak.co.il | Dragonransomware | Business Services | Dec 15, 2024 |
| 85 | fuse.io | Funksec | Technology | Dec 13, 2024 |
| 86 | Harel Insurance ( Shirbit Server ) | Handala | Financial Services | Dec 3, 2024 |
| 87 | Silicom | Handala | Technology | Nov 24, 2024 |
| 88 | curenta.com | Ransomhub | Healthcare | Nov 21, 2024 |
| 89 | scalar.co.il | Ransomhub | Technology | Nov 20, 2024 |
| 90 | Gilazo | Safepay | — | Nov 19, 2024 |
| 91 | BluMed Health | Killsec | Healthcare | Nov 15, 2024 |
| 92 | Pincu Barkan, Law Office and Notary | Everest | Business Services | Nov 14, 2024 |
| 93 | Elad municipality | Handala | Public Sector | Nov 3, 2024 |
| 94 | IM Cannabis | Handala | Agriculture and Food Production | Oct 30, 2024 |
| 95 | payxpress.co.il | Ransomhub | Financial Services | Oct 27, 2024 |
| 96 | The Knesset - Israel | Hellcat | Public Sector | Oct 25, 2024 |
| 97 | Modiin Ezrachi | Meow | Business Services | Oct 12, 2024 |
| 98 | Doscast | Handala | Consumer Services | Oct 10, 2024 |
| 99 | Max Shop | Handala | Business Services | Oct 8, 2024 |
| 100 | IIB ( Israeli Industrial Batteries ) Leaked | Handala | Manufacturing | Oct 6, 2024 |
Frequently Asked Questions
How many ransomware attacks have occurred in Israel?
Israel has recorded 141 ransomware victim disclosures in this database, ranking #20 globally. This represents 0.7% of all tracked ransomware attacks worldwide.
Which ransomware groups target Israel?
The ransomware groups most active in Israel are Handala, Qilin, Funksec, Ransomhub. These groups collectively account for the majority of victim disclosures attributed to Israel.
Which industries are most targeted by ransomware in Israel?
In Israel, the most frequently targeted sectors are Technology, Public Sector, Business Services. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.
How does Israel rank globally for ransomware attacks?
Israel ranks #20 globally for ransomware attacks with 141 victim disclosures, representing 0.7% of the worldwide total of 21,376 tracked victims.
How can organisations in Israel protect against ransomware?
Organisations in Israel should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting Israel is also recommended.