CSIDB logo
Incident

Kuwait News Agency

Incident posture

Attack window
Jan 2020
Location
Kuwait
Status
Historical
CIA posture
Available to members
Updated
2025-11-02 00:00

Linked entities

Victim
Kuwait News Agency
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Jan 2020
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

The Kuwait State News Agency's Twitter account was compromised to disseminate false claims regarding an imminent withdrawal of U.S. troops from a Kuwaiti military camp, falsely attributing the announcement to the country's defense minister. The agency swiftly denied the fabricated report, clarified the breach, and confirmed an ongoing investigation by Kuwait's Ministry of Information. This incident occurred amid heightened regional tensions following recent U.S.-Iran hostilities, mirroring prior confusion over troop movements in Iraq and underscoring concerns about opportunistic disinformation campaigns exploiting geopolitical instability. The hack amplified existing uncertainties surrounding military deployments during a critical period of escalating confrontations.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On January 8, 2020, Kuwait’s state news agency (KUNA) reported that its official Twitter account had been compromised by hackers. The attackers used the breached account to disseminate fabricated information claiming Kuwait’s defense minister received a letter from the United States announcing the withdrawal of American troops from a Kuwaiti military camp within three days. This false report was rapidly circulated before KUNA deleted the unauthorized post. The agency issued follow-up statements categorically denying the legitimacy of the withdrawal announcement and confirming an investigation by Kuwait’s Ministry of Information into the security breach. No technical details regarding the intrusion method or additional compromised systems were disclosed.

The incident occurred amid heightened regional tensions following the U.S. killing of Iranian General Qassem Soleimani on January 3, 2020, and Iran’s retaliatory missile strikes on U.S.-occupied Iraqi airbases on January 7. This geopolitical context had already created confusion about U.S. troop movements, exemplified by an earlier erroneous draft letter suggesting a withdrawal from Iraq. Cybersecurity researchers had warned of anticipated disinformation campaigns exploiting the crisis, though no attribution for the KUNA hack was established. The false withdrawal narrative amplified existing uncertainties about military deployments during a critical diplomatic period, coinciding with U.S. President Trump’s January 8 announcement of new economic sanctions against Iran in lieu of military escalation. Kuwaiti authorities maintained operational continuity of their news services while addressing the social media compromise through public disavowals and investigative measures.

Sources

Sources available to members: 1 source.

CSIDB