Aramco

Aramco was compromised in a ransomware attack attributed to handala in March 2026. The organization, operating in the Energy sector in SA, was added to the group's data leak site as part of an extortion campaign.

handala operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

For years, Aramco’s oil money was turned into bullets and bombs that were dropped on Palestinian children, or it funded the construction of the Epstein cult’s pedophile island, or paid for Trump’s missiles to strike a girls’ school in Iran. But that is no longer the case. Now the entire infrastructure of Aramco has been…