Full Breakdown
Iranian Hacker Group Claims Breach of Israel's Clalit Healthcare Provider
2/26/2026, 2:35:32 AM
Overview of the Cyberattack
On Wednesday, the Iranian-linked hacker group Handala announced via social media that it had successfully infiltrated Clalit, Israel’s largest healthcare provider, claiming to have accessed sensitive medical data of over 10,000 patients. Handala characterized the breach as a significant strike against the "Zionist regime's healthcare system," asserting that it exposed vulnerabilities in Israel's cybersecurity infrastructure. Clalit, which serves approximately 4.8 million Israelis, has not confirmed whether any patient data was leaked but is currently investigating the claims.
Details of the Breach
Handala's statement included assertions that the hack delivered a "devastating blow" to Israel's healthcare system, mocking the country's technological prowess. The group claimed that the operation was a legitimate response to what it described as decades of occupation and human rights violations by Israel. Accompanying the announcement were screenshots purportedly showing medical records from Clalit’s database, which included personal information and details of medical screenings and tests.
Clalit’s Response
In response to the breach, Clalit stated that its cybersecurity specialists were actively investigating the incident and had notified relevant government authorities. The organization emphasized that its systems were functioning normally and that proactive measures were being taken to bolster defenses. Clalit’s official statement indicated that monitoring and response mechanisms were activated upon receiving the hackers' claims.
Context of Cyberattacks on Israeli Infrastructure
This incident is part of a broader pattern of cyberattacks attributed to Iranian groups targeting Israeli infrastructure. Handala has previously claimed responsibility for hacking the phones of Israeli political figures, including former Prime Minister Naftali Bennett. While Bennett's office acknowledged that his Telegram account was compromised, they denied that his phone had been hacked. Other Iranian-linked cyberattacks have also targeted healthcare facilities in Israel, including a ransom demand incident involving the Assaf Harofeh Medical Center last October.
Criticism and Expert Opinions
Gil Messing, chief of staff at the Israeli cybersecurity firm Check Point, commented on the credibility of Handala's claims, suggesting that while the group has a history of exaggeration, their assertions typically indicate some level of successful intrusion. He noted that the current geopolitical tensions between Israel and Iran may have prompted Handala to escalate its cyber activities.
Conflicting Reports & Gaps
While Handala claims to have released sensitive data, Clalit has not confirmed any data breach or patient data compromise. The extent of the alleged breach remains unclear, and there are discrepancies regarding the actual impact on Clalit’s systems.
Verbatim Quotes
- “Clalit stands as a symbol of the Zionist entity’s healthcare infrastructure,” — Handala
- “You boast of possessing the most advanced technologies, yet now you helplessly witness the collapse of your security walls,” — Handala
This incident highlights the ongoing cyber conflict between Iran and Israel, raising concerns about the security of critical infrastructure in the region.
