Ransomware Intelligence

IranWire

Ransomware victim

handalaGroup
IranCountry
Mar 31, 2026Discovered

Industry

Technology

Country

Iran

Discovered

3 months ago

Attack date

Mar 31, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

handala

Total victims

129

First seen

Jun 2025

Last seen

Apr 2026

Group status

active

Sophistication

0

Impact score

85

Threat level

2/10
Aggressiveness5/10
Lethality0.1/10
Criticality0.7/10

Status breakdown

Data Leaked1.6%2
Claimed
this victim
98.4%127

Victim's position within group

Industry

Technology

Known target sector

Country

Iran

Not a listed target country

Group activity

Monthly attacks · handala

129

total · avg 11.7/mo

JunJulAugSepOctNovDecJanFebMarApr015304560