Cyber Incident Victim: Patriotic Brigade Knights
Date:
Feb 2021
Location:
United States of America
Summary
A collective of Israeli anti-fascist hackers operating as Hayalim Almonim breached a website affiliated with the Ku Klux Klan, compromising the Patriotic Brigade Knights' platform. The attackers exfiltrated and publicly disseminated members' personal information—including names, photos, phone numbers, and addresses—with specific details about the group's alleged leader and a senior member's sexual assault conviction from public registries. They defaced the site with anti-white supremacy messages and declared intentions to dismantle fascist networks through continued cyber operations, citing prior attacks against similar organizations. The hackers, aligning with Antifa principles, framed their actions as counter-terrorism measures targeting white supremacist activities across multiple U.S. states.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On February 4, 2021, a collective of Israeli hackers operating under the name Hayalim Almonim (Hebrew for Anonymous Soldiers) breached the website of the Patriotic Brigade Knights, a group affiliated with the Ku Klux Klan. The hackers identified themselves as part of the anti-fascist Antifa movement and executed a multi-phase attack against the white supremacist organization. They first extracted and subsequently published sensitive member information—including names, photographs, phone numbers, and physical addresses—through social media platforms. Among the compromised data were specific details about the group's alleged leader, whose personal identifiers were publicly exposed. The attackers additionally defaced the website by replacing original content with anti-fascist messages, prominently displaying a banner reading "Shabbat Shalom! Goodnight white pride." They supplemented this action by linking to the Texas Public Sex Offender Registry, highlighting a senior member's prior conviction for sexually assaulting a 14-year-old girl.
The hackers declared their objective was to "strike terror into the hearts of the enemies of humanity" and issued warnings about further attacks during communications with BBC News and the Jerusalem Post. They explicitly threatened to continue operations until delivering a "death blow to fascism in the United States," framing their actions as retaliation against "facilitation of fascistic terrorist activity." Hayalim Almonim referenced prior cyber operations against another KKK-aligned entity, the Church of the Ku Klux Klan, which they claimed had active chapters in 25 U.S. states. The breach caused immediate operational disruption to the Patriotic Brigade Knights through website defacement and reputational damage via exposure of members' personal details and criminal histories. The hackers leveraged psychological impact as a tactical element, urging other anti-fascist groups to replicate their methods to amplify fear among ideological adversaries. No containment measures or responses from the compromised organization were documented in available reporting.