Cyber Incident Victim: Israeli Government
Date:
Mar 2022
Location:
Israel
Summary
A cyber attack involving a distributed denial-of-service (DDoS) targeted an Israeli communications provider, temporarily disrupting access to multiple government websites. The National Cyber Directorate confirmed the incident and restored domestic access within hours, though international connectivity remained affected according to web monitoring groups. Local media cited defense sources characterizing it as the largest cyber attack against the country to date. While no perpetrator was officially identified, historical attacks on Israeli infrastructure have been linked to Iranian actors. The incident occurred amid heightened tensions between the two nations, including recent missile strikes and reciprocal accusations of physical attacks in regional conflicts.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On March 14, 2022, Israel’s National Cyber Directorate reported a distributed denial-of-service (DDoS) attack targeting a communications provider, which temporarily disrupted access to multiple Israeli government websites. The attack was identified during the day, with the directorate confirming via Twitter that the incident had caused short-term outages affecting sites under government domains. By the time of the announcement, domestic access had been restored, though international monitoring group NetBlocks later observed that Israel’s government network remained unreachable outside the country. Attempts by AFP journalists to access ministry websites and the National Cyber Directorate’s own site around 20:00 GMT—approximately two hours after the restoration claim—were unsuccessful, indicating lingering international connectivity issues. The Israeli daily Haaretz cited an unnamed defense establishment source describing the incident as the largest cyber attack ever launched against Israel. Israel’s Ministry of Communications convened an emergency assessment with its internal response teams following the disruption, though no technical details about the attack’s scale or the specific provider involved were disclosed.
No group or state actor was immediately attributed to the attack. Historical context provided in reports noted that previous cyber incidents against Israeli infrastructure had been linked to Iranian-affiliated threat actors. The attack occurred amid heightened tensions between Iran and Israel, including a March 13 missile strike by Iran’s Revolutionary Guards on what they claimed was an Israeli “strategic centre” in Arbil, Iraq—a claim disputed by Kurdish authorities. This strike followed the March 7 killing of two Iranian officers in a Syria rocket attack, which Iran attributed to Israel. The cyber attack’s timing coincided with this cycle of military and cyber hostilities, though no direct connection between the events was confirmed by Israeli officials. The incident highlighted vulnerabilities in critical national infrastructure but resulted in no reported data breaches or prolonged service disruptions beyond the initial DDoS mitigation period.