Handala Claims Publication of Vahid Offline Members’ Data
Summary
Handala claims it published a list of 180,000 Iranian members of Vahid Offline, including their mobile numbers. The ransomware.live post says the claim is unverified.
Key points
- Handala is identified as the actor claiming to have published the list.
- The claimed list contains 180,000 Iranian channel members and their mobile numbers; the post does not independently verify the claim.
- The record lists Vahid Offline Members as the victim and March 17, 2026, as the discovery and publication date.
- The entry is monitored by ransomware.live and says it cannot confirm the information’s accuracy.
Article Details
- Victim
- Vahid Offline Members
- Claim Date
- 2026-03-17
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed; handala says it published the list, but the claim is unverified.
- Exfiltrated Data
- A list of Iranian channel members and their mobile numbers, according to handala.
- Exfiltrated Size
- Claimed to include 180,000 members; unverified.
- Ransom Demand
- None reported
- Leak Status
- handala claims the list was published; the article's source says it cannot confirm the information's accuracy.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| URL | hxxps[:]//handala-hack[.]to/vahid-offline-members/ | URL listed as the source for handala's unverified claim that it published the members' list. |