Skip to main content

BREAKING AND UNVERIFIED: Has the War Already Begun? Iran Claims Major Cyber Breach of Israel’s Most Classified Crisis System


Pro-Iranian hacker group Handala says it has infiltrated “Sapir,” the classified network allegedly linking the Mossad, Shin Bet, the IDF, and the Prime Minister’s Office — claiming to have leaked 1,500 names of security officials. None of these claims have been independently verified.


Has the US/Israel-Iran war already begun? That is the alarming question emerging tonight after a pro-Iranian hacking collective known as Handala claimed responsibility for what it describes as a full-scale penetration of one of Israel’s most classified digital systems. According to a report published by the Iranian newspaper Hamshahri Online, citing Fars News Agency, the group alleges it has breached a top-secret Israeli crisis management platform called “Sapir” — and has begun leaking what it says is highly sensitive data tied to the country’s security establishment.

If even partially true, the claimed breach would represent one of the most significant cyber intrusions in the history of the Israeli-Iranian shadow conflict. However, it must be stressed that these claims originate exclusively from Iranian-aligned sources, and no independent confirmation has been provided as of this publication.

What Is Sapir, According to the Hackers?

According to the Handala group’s own disclosures — as relayed by Iranian media — Sapir is described as a highly classified network designed to coordinate crisis management during wartime and national emergencies. The hackers claim the system acts as the central nervous system of Israel’s security apparatus, reportedly connecting the Israeli Defense Forces (IDF), the Mossad intelligence agency, the Shin Bet domestic security service, and the Prime Minister’s Office into a single command-and-control platform. The group characterizes Sapir as one of the key pillars of Israel’s national security architecture.

The Alleged Breach: What the Hackers Claim Was Compromised

The Handala group claims to have not only penetrated the system but also exfiltrated and publicly released a trove of classified data. Most notably, the hackers say they have published a list of approximately 1,500 names and phone numbers of individuals they allege are directly connected to the Sapir project. If authentic, this would represent an unprecedented exposure of personnel tied to Israel’s most guarded security operations — though the veracity of this data remains entirely unconfirmed.

The group further identified a figure they claim is at the helm of the Sapir project: General Yoram Laredo, whom they described as one of the central figures in Israel’s digital security ecosystem. According to their statements, they have also obtained extensive contact information and network maps of individuals allegedly associated with the project.

Handala’s Message: “A Sign of Israel’s Security Fragility”

In a statement accompanying the purported data dump, the Handala group characterized the breach as what they called definitive proof of “the fragility of Israel’s security structure.” The group framed the alleged attack as part of a broader cyber campaign against Israeli infrastructure, suggesting that further disclosures may follow. Such rhetoric is consistent with the escalatory posture Iran-aligned cyber groups have adopted in recent months.

What This Would Mean — If Verified

The potential implications of this breach — should it be independently confirmed — would be staggering. The exposure of a system linking the highest echelons of Israel’s military and intelligence community would represent a direct threat to operational security at the most sensitive level. The alleged leak of 1,500 names and contact details could compromise ongoing intelligence operations, endanger personnel, and provide adversaries with a detailed map of Israel’s crisis response chain of command.

This claimed incident comes amid an already escalating cycle of cyber confrontations between Iran-aligned groups and Israeli targets. Analysts have warned for months that the shadow war in cyberspace is rapidly approaching a point of no return — and if the Sapir breach is real, it may mark the most significant escalation yet.

As of this report, Israeli authorities have not publicly responded to the Handala group’s claims. No independent cybersecurity firm or Western intelligence source has confirmed or denied the breach.


DISCLAIMER: This report is based exclusively on claims made by the Handala cyber group as reported by Hamshahri Online and Fars News Agency, both Iranian state-affiliated media outlets. The Levant Files has not independently verified the authenticity or accuracy of any of the leaked data or assertions contained herein. Sensitive images and documents accompanying the original Iranian report have been deliberately withheld from publication. Readers are advised to treat these claims with appropriate caution until independent verification is available.