The pro-Palestinian hacktivist collective Handala Hack Team published the full names and personal details of 69 Israeli Navy officers involved in last week's violent interception of the Global Sumud Flotilla, placing a $100,000 bounty on each officer and warning Israeli officials that "no crime, on land or at sea, will go unanswered."

Screenshot of the tweet from Handala (embedding not working on this tweet)

The Leak

In a statement posted to X on Monday, May 25, Handala declared the officers "wanted fugitives," writing: "The full names and details of the 69 Israeli naval officers who recently attacked the global Sumud convoy have been exposed and made publicly available."

The group offered a $100,000 bounty for information on each of the 69 officers, according to multiple reports citing the original statement. The full names and personal details were posted publicly on Handala's platforms for anyone to view.

Describing the leak as an act of resistance, Handala added: "We are the lightning, after which you must always expect the rain of revenge." The group declared its unwavering solidarity with the Sumud convoy and all maritime fighters challenging Israel's naval blockade.

Screenshot of leaked IOF officers from the Handala website

You can view the full leak on Handala’s website your browser will flag it as unsafe because it is an http website not https. Multiple scans show the site is safe to view.

The statement concluded with a direct warning to Israeli National Security Minister Itamar Ben-Gvir: "Know that no crime, on land or at sea, will go unanswered. You and all the corrupt, bloodthirsty members of this cabinet will be hunted everywhere by the shadows of the resistance. After every lightning bolt, expect the storm of our wrath."

Israeli authorities have not publicly confirmed the alleged breach or the authenticity of the leaked information. The hacker group previously claimed responsibility for cyberattacks targeting associates of former Israeli Prime Minister Naftali Bennett and senior aides to Prime Minister Netanyahu.

Fleet of boats departing from Marmaris port as part of the Global Sumud Flotilla, May 14, 2026

The Global Sumud Flotilla Interception

The leak comes exactly one week after Israeli naval forces boarded and seized all 54 vessels of the Global Sumud Flotilla in international waters near Cyprus on May 18, 2026.

The convoy — organized from the Turkish port of Marmaris — carried approximately 430 activists from more than 40 countries attempting to deliver humanitarian aid and challenge Israel's illegal naval blockade of Gaza. According to flotilla organizers, 428 participants from over 40 countries were detained, including 78 Turkish nationals. Reuters reported 430 activists aboard, including citizens of Italy and South Korea.

Footage from the interception showed armed Israeli soldiers boarding vessels while activists in life vests raised their hands. Soldiers then destroyed cameras mounted on the vessels. Israeli forces transferred all detainees to the port of Ashdod, where they were held before being deported to their home countries over the following days.

Itamar Ben-Gvir gesturing during visit to detained flotilla activists at Ashdod port

Ben-Gvir's Provocation and International Backlash

Israeli National Security Minister Itamar Ben-Gvir visited the detained activists at Ashdod port and posted video of himself waving an Israeli flag and declaring, "We are the owners of the house." The footage showed officers forcing an activist to the ground. Reuters later published video showing Israeli police forcing detained activists to kneel with their hands bound behind their backs at Ashdod.

The stunt triggered immediate international condemnation. France declared Ben-Gvir persona non grata over the provocation. Officials in South Korea condemned Israel over the detention of Korean activists aboard the flotilla. Arab and Islamic foreign ministers called Ben-Gvir's taunting of detained activists a "disgraceful assault on human dignity."

Israel's own Prime Minister Netanyahu publicly scolded Ben-Gvir for the videos, acknowledging they had damaged Israel's diplomatic standing. Canadian Prime Minister Mark Carney called Israel's treatment of detained flotilla members "abominable."

Multiple activists have since alleged sexual abuse and torture while in Israeli detention, allegations that Israel has denied.

Instagram message from Freedom Flotilla Coalition.

The Flotilla's Mission

The Sumud Flotilla was not purely a humanitarian mission. Rosa Martinez, affiliated with the Adalah organization, acknowledged in an Instagram video that confronting Israeli forces and drawing international attention to the blockade were central objectives of the operation.

"Yes, there is aid," Martinez said, while arguing that the larger purpose was to "directly confront Israeli forces at sea and spotlight the blockade imposed on Gaza."

The flotilla's organizers had been planning the mission for months. The 54-vessel convoy departed from Marmaris in southern Turkey on May 14, 2026, sailing through the Mediterranean toward Gaza. The interception took place approximately 250 nautical miles from Gaza, in what flotilla organizers described as international waters — a characterization that, if accurate, would place the Israeli operation in violation of international maritime law.

Israel claims its naval blockade of Gaza is legal under international law, a position contested by human rights organizations and the United Nations. The blockade has been in place since 2007, restricting the flow of goods, aid, and people into and out of the besieged territory.

Handala Hackers Statement from their Website.

Who Is Handala?

Handala Hack Team — named after the iconic Palestinian cartoon character created by Naji al-Ali in 1969, which has served as a symbol of Palestinian identity, defiance, and the right of return — first appeared in December 2023, weeks after October 7. The group has become one of the most prolific hacktivist operations targeting Israeli infrastructure.

The group describes itself as pro-Palestinian resistance. Western analysts and the US Department of Justice, however, have linked Handala to Iran's Ministry of Intelligence, describing the group as a front for Iranian cyber operations. Wired reported that Handala is a suspected front for the ministry. The FBI has said Handala is operated by an MOIS unit also responsible for two other personas — "Justice Homeland" and "Karma Below."

Previous Operations

Handala's track record includes some of the most significant cyber breaches targeting Israeli institutions:

• November 2024: Leaked 110,000 emails from former Israeli Prime Minister Ehud Barak, 60,000 emails from former IDF Chief of Staff Gadi Eisenkot, 50,000 emails from ambassador to Germany Ron Prosor, and 2,000 photos plus 35,000 emails from former Defense Minister Benny Gantz — including one photo depicting Gantz topless in bed beside a woman.
• September 2024: Claimed to have seized 197 gigabytes of data from the Soreq Nuclear Research Center, posting 30 images taken at the facility and the names of scientists working on its particle accelerator.
• November 2024: Hacked into Vidisco, claiming to have discovered a "backdoor" in security scanners that enabled the explosives used in Israel's pager attack in Lebanon.
• April 2026: Released personal details of 50 senior officers from Unit 9900, the Israeli military intelligence (Aman) unit specializing in geospatial intelligence.
• May 2026 (earlier this month): Exposed the identities of 100 elite Israeli Maglan Unit 212 officers in what the group called a "historic breach."

The group was forced to reorganize after two of its most prominent figures were reportedly killed during the 2026 Iran war, according to the Irish Examiner. Unit leader Yahya Hosseini Panjaki (also known as Yahya Hamidi), who was sanctioned by the US in 2024, was among those killed.

Screenshot from Ben Gvir video showing bound flotilla activists at Ashdod port

Context: Escalating Cyber Retaliation

The Handala leak is part of a broader escalation of cyber operations connected to the ongoing genocide in Gaza and Israel's regional wars. The group's operations have grown more aggressive and technically sophisticated since its founding, moving from website defacements and SMS campaigns to large-scale data exfiltration and targeted doxing of military personnel.

The targeting of Israeli naval officers specifically over the Sumud Flotilla interception represents a new tactical dimension — using cyber capabilities to impose personal accountability on individual soldiers and officers involved in operations against civilians and international activists.

Whether the leaked identities are verified and complete remains unconfirmed by independent parties. But the psychological and operational impact on the named officers is immediate: each now faces a public bounty, potential physical danger, and the permanent digital record of their alleged involvement in the flotilla interception.

What Happens Next

The Handala leak raises several immediate questions:

• Authenticity: Israeli authorities have not confirmed whether the 69 names are genuine naval officers or whether the details are accurate. Independent verification has not yet been completed.
• Personal safety: Officers named in the leak now face potential targeting. The $100,000 bounties, while possibly symbolic, introduce a tangible incentive for individuals or groups to pursue the named officers.
• Diplomatic fallout: The leak adds another layer to the already severe international backlash over Israel's treatment of the flotilla activists. France's declaration of Ben-Gvir as persona non grata and South Korea's condemnation show the diplomatic cost of the operation.
• Cyber escalation: Israel may respond with its own cyber operations against targets affiliated with Handala or Iran. The cycle of digital retaliation shows no signs of abating.
• Legal implications: Publishing personal details of military personnel with bounties could raise questions under international law regarding the targeting of individuals, though Israel's own actions against the flotilla in international waters face similar legal scrutiny.

Israel has not publicly commented on the Handala leak as of press time.