Cyber Incident Victim: Israel Defense Forces
Date:
Aug 2014
Location:
Israel
Summary
Hackers affiliated with Anonymous disrupted multiple Israeli government websites, including those of the Israel Defense Forces, the Bank of Israel, and the Prime Minister's office, in response to the alleged shutdown of the group's social media accounts. The attackers published a target list via Pastebin under the AntiSec alias, expressing solidarity with Gaza and aiming to halt military actions. Some services remained inaccessible, with the IDF site among those still offline. This incident followed previous compromises of the military's online presence, such as the hijacking of its Twitter account by another hacker group which spread false warnings about a nuclear leak.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On August 24-25, 2014, hackers identifying as Anonymous and AntiSec executed cyberattacks against critical Israeli government websites, including Israel Defense Forces (idf.gov.il), the Bank of Israel, and the Israeli Prime Minister's site. The attackers publicly claimed responsibility through a Pastebin post under the AntiSec alias, framing the operation as retaliation for the alleged shutdown of Anonymous-affiliated social media accounts. They cited solidarity with Gaza's population and opposition to Israeli military actions as motivations. The group emphasized persistence in their message, quoting, "You never know what results will come from your action. But if you do nothing, there will be no result." Technical disruption methods were not detailed, but the attacks rendered multiple high-profile sites inaccessible, with idf.gov.il remaining offline during initial reporting. Anonymous amplified the event via Twitter, using the hashtags #OpSaveGaza and #AntiSec alongside a "Tango Down" declaration.

The incident caused sustained service outages for targeted entities, disrupting public access to official online resources. This marked a recurring pattern for IDF's digital infrastructure, which had faced prior compromises. In July 2014, the Syrian Electronic Army hijacked IDF's Twitter account, posting a fabricated nuclear leak alert following rocket strikes near the Dimona facility. The August attack compounded existing vulnerabilities in Israel's governmental web presence, though no data breaches or secondary consequences were reported. Anonymous did not specify operational timelines or restoration countermeasures, and the article did not document official responses from affected organizations. Historical context indicated that IDF's online platforms were frequent targets for hacktivist groups during periods of regional conflict.
