Cyber Incident Victim: Hyp CreditGuard
Date:
Nov 2024
Location:
Israel
Summary
A suspected DDoS attack targeted communication providers and services linked to Hyp CreditGuard, causing thousands of credit card readers at Israeli gas stations and supermarkets to malfunction. The hour-long incident disrupted transactions before being mitigated, with services restored to normal operation following coordination with security agencies. This follows prior Iranian cyberattacks on Israeli civilian infrastructure, including a similar incident weeks earlier that impacted debit card approvals through a different payment system operator, though core functions prevented broader market disruption.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On November 10, 2024, thousands of credit card readers malfunctioned across Israeli retail locations, including gas stations and supermarket chains, during a suspected distributed denial-of-service (DDoS) attack targeting Hyp CreditGuard’s systems. The incident began on Sunday morning and disrupted payment processing services for approximately one hour before mitigation efforts restored operations. Hyp CreditGuard, the cybersecurity provider responsible for safeguarding the affected card readers, publicly attributed the outage to a DDoS attack targeting its services and associated communication suppliers. The company confirmed no evidence of a broader cyber intrusion or data compromise, ruling out systemic threats to financial data integrity. Following service restoration, Hyp CreditGuard issued a statement confirming the attack had been blocked and normal operations resumed, with ongoing coordination involving unspecified Israeli security agencies to maintain system stability.
The incident occurred against a backdrop of heightened cyber threats against Israeli civilian infrastructure, with the article referencing prior Iranian cyber operations targeting financial systems. In October 2024, a separate attack impacted Sheba (Automated Bank Services), which manages Israel’s national credit-based payment system, causing transaction approval delays for debit card users. Unlike the November 10 Hyp CreditGuard incident, the October attack against Sheba did not fully compromise core payment infrastructure, preventing severe market disruption. Hyp CreditGuard’s disruption was resolved faster—within an hour—with no reported lingering effects on transaction approvals or secondary market impacts, contrasting with Sheba’s earlier prolonged delays. No entity claimed responsibility for the November 10 attack, and the article did not specify attribution evidence beyond contextual references to regional threat activity.