Cyber Incident Victim: Zerem.co.il
Date:
Aug 2014
Location:
Israel
Summary
A hacker group identifying as both Islamic Cyber Resistance and Anonymous Iran breached an Israeli job recruitment platform, exfiltrating and leaking personal details of approximately 70,000 registered users. The attackers publicly claimed responsibility, framing the incident as part of the #OpSaveGaza campaign to oppose Israeli military actions in Gaza and express solidarity with Palestine. While external cybersecurity observers assessed the leaked data as potentially legitimate, the compromised organization did not publicly confirm or deny the breach at the time of initial reports. The incident highlighted geopolitical tensions influencing cyber operations against civilian-facing digital infrastructure.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In August 2014, the Israeli job-search platform Zerem.co.il became the subject of an unconfirmed data breach claim by a group identifying as Islamic Cyber Resistance (ICRG), which also used the Anonymous moniker. The hackers asserted they had compromised the website and exfiltrated personal information belonging to 70,000 registered users. They publicly released the data under the banner of #OpSaveGaza, a campaign explicitly linked to the Israeli-Palestinian conflict. In communications with media outlets, including HackRead and Wagas, ICRG stated the attack was conducted in retaliation against Israeli military operations in Gaza and as an act of solidarity with Palestine. The compromised data reportedly included user registration details, though specific data fields were not enumerated in available reports. At the time of initial media coverage on August 6, 2014, Zerem.co.il had not issued any public acknowledgment or denial of the breach, leaving the claim unresolved.
Media analysis of the leaked data by HackRead suggested the information appeared legitimate, though independent verification remained inconclusive. No technical details regarding the attack vector—such as exploitation methods, vulnerability types, or network intrusion patterns—were disclosed by the attackers or corroborated by third-party investigators. The incident attracted attention due to its geopolitical context amid heightened tensions during the Gaza conflict, but it generated limited public documentation beyond initial reports. No subsequent statements from Zerem.co.il regarding incident response, user notifications, or remediation efforts were documented in the available source material. The absence of confirmed forensic evidence or post-incident updates left the scale of impact and validity of the attackers’ claims indeterminate beyond the initial dataset publication.