MENA hacktivist groups and the operations they publicly claim — DDoS, defacement and hack-and-leak postings, curated from public claim channels. Every row is a claim by the group, not a confirmed breach or verified outage — metadata only, same posture as Ransomware Watch. A group name links to its actor profile when matched, and shared tradecraft/infrastructure across sources is what Correlated Activity clusters.
This is a curated collection, not a live feed: new claims are added as the analyst verifies them as public postings, not in real time.
Group claims, not confirmed impacts — metadata only.
14 of 40 shown · filtered to Data leak
| Group | Type | Target | Sector | Country | Claimed | Motive |
|---|---|---|---|---|---|---|
| Handala Hack Team | Data leak | Clalit Health Services (Israel's largest HMO; claimed medical data of 10,000+ patients) | Healthcare | IsraelIL | 2026-02-25 | pro-palestine |
| Cyber Toufan ↗ | Data leak | Maya Engineering (Israeli defense contractor; 117 internal CCTV videos + weapons-component drawings leaked; part of claimed 17-firm supply-chain breach) | Defense Manufacturing | IsraelIL | 2025-11-04 | pro-palestine |
| Cyber Fattah | Data leak | 2024 Saudi Games records (6,000+ athletes/visitors; passports, IDs, IBANs, bank statements, medical forms) | Sports / Government | Saudi ArabiaSA | 2025-06-22 | pro-iran |
| Predatory Sparrow ↗ | Data leak | Nobitex cryptocurrency exchange (~$90M drained to vanity 'burn' wallets; full source code and internal docs published) | Cryptocurrency Exchange | IR | 2025-06-18 | anti-iran |
| Handala Hack Team | Data leak | Israel Police (claimed ~2.1TB; ~350,000 files incl. weapon permits, personnel and case records; Israel denies, points to third-party vendor) | Law Enforcement | IsraelIL | 2025-02-09 | pro-palestine |
| Handala Hack Team | Data leak | El'ad municipality (claimed 3+ TB) | Municipal | IsraelIL | 2024-11-03 | pro-palestine |
| Handala Hack Team | Data leak | Shin Bet (claimed data on ~30,000 officers) | Intelligence | IsraelIL | 2024-10-03 | pro-palestine |
| Handala Hack Team | Data leak | Soreq Nuclear Research Center (claimed ~197GB; assessed by Israel as psychological warfare) | Nuclear Research | IsraelIL | 2024-09-30 | pro-palestine |
| Handala Hack Team | Data leak | Emails attributed to former Israeli FM Gabriel 'Gabi' Ashkenazi (60,000+ emails claimed) | Government / Political | IsraelIL | 2024-09-26 | pro-palestine |
| Handala Hack Team | Data leak | Ma'agan Michael Kibbutz (22GB exfiltrated; 5,000+ warning SMS) | Agriculture / Local Community | IsraelIL | 2024-06-15 | pro-palestine |
| Cyber Toufan ↗ | Data leak | Israel Innovation Authority | Government | IsraelIL | 2023-11-16 | pro-palestine |
| Cyber Toufan ↗ | Data leak | Signature-IT hosting provider (data of ~40-49 Israeli firms; servers wiped) | IT Hosting / Multiple | IsraelIL | 2023-11-16 | pro-palestine |
| Cyber Toufan ↗ | Data leak | Mann-Shinar (Israeli infrastructure-projects firm; claimed ~5GB incl. 800+ design files) — ~March 2025 | Engineering / Infrastructure | IsraelIL | — | pro-palestine |
| Handala Hack Team | Data leak | Israeli Air Force personnel (claimed 180+ profiles / dossiers on pilots and drone operators) | Defense / Military | IsraelIL | — | pro-palestine |
Columns match spec §7 doctrine: group (linked when matched, plain when not), op-type badge, target, sector, country, claim date, motive. No claim/leak/onion URL is ever stored or shown, mirroring Ransomware Watch.