Cyber Incident Victim: Israeli Government
Date:
Aug 2014
Location:
Israel
Summary
Hackers associated with Anonymous disrupted access to key Israeli government websites, including those of the Prime Minister's office, the Israel Defense Forces, and the Bank of Israel, in response to alleged shutdowns of the group's social media accounts. The attackers publicly listed the targeted sites via Pastebin under the AntiSec alias, framing the disruption as an act of solidarity with Gaza and an attempt to deter military actions against the region. Some services, such as the IDF's official website, remained offline following the attack. The group emphasized persistence in their message, stating that individual setbacks would not halt their collective efforts. This incident followed prior compromises of IDF digital assets, including a separate Twitter account hijacking by another hacker collective months earlier.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On August 24-25, 2014, hackers identifying with the Anonymous collective and using the AntiSec alias launched cyberattacks against critical Israeli government websites, including the official site of the Israeli Prime Minister, Israel Defense Forces (idf.gov.il), and the Bank of Israel. The attackers publicly listed these targets on Pastebin, declaring their actions as retaliation against Israel’s military operations in Gaza and expressing solidarity with its civilian population. They disrupted services by taking the websites offline, with idf.gov.il remaining inaccessible at the time of reporting. The group framed the attack as part of #OpSaveGaza and referenced a Gandhi quote in their Pastebin manifesto, emphasizing persistence despite individual setbacks: "You never know what results will come from your action. But if you do nothing, there will be no result." A tweet from the @AnonymousGlobo account on August 25 confirmed the takedowns using the hashtag #TangoDown.

The incident compounded existing cybersecurity challenges for Israeli infrastructure, particularly for the IDF, which had faced prior disruptions. In July 2014, the Syrian Electronic Army hijacked the IDF’s Twitter account to falsely warn of a nuclear leak after rocket strikes near the Dimona facility. The Anonymous-led attack further degraded public access to IDF services and underscored recurring vulnerabilities in state-affiliated digital assets. No restoration timelines or technical countermeasures were detailed in available reports. The attackers did not claim data theft or defacement; their primary impact was service denial targeting high-profile government domains to amplify political dissent against Israeli military actions.
