Cyber Incident Victim: Kuwait News Agency
Date:
Jan 2020
Location:
Kuwait
Summary
The Kuwait State News Agency's Twitter account was compromised to disseminate false claims regarding an imminent withdrawal of U.S. troops from a Kuwaiti military camp, falsely attributing the announcement to the country's defense minister. The agency swiftly denied the fabricated report, clarified the breach, and confirmed an ongoing investigation by Kuwait's Ministry of Information. This incident occurred amid heightened regional tensions following recent U.S.-Iran hostilities, mirroring prior confusion over troop movements in Iraq and underscoring concerns about opportunistic disinformation campaigns exploiting geopolitical instability. The hack amplified existing uncertainties surrounding military deployments during a critical period of escalating confrontations.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On January 8, 2020, Kuwait’s state news agency (KUNA) reported that its official Twitter account had been compromised by hackers. The attackers used the breached account to disseminate fabricated information claiming Kuwait’s defense minister received a letter from the United States announcing the withdrawal of American troops from a Kuwaiti military camp within three days. This false report was rapidly circulated before KUNA deleted the unauthorized post. The agency issued follow-up statements categorically denying the legitimacy of the withdrawal announcement and confirming an investigation by Kuwait’s Ministry of Information into the security breach. No technical details regarding the intrusion method or additional compromised systems were disclosed.
The incident occurred amid heightened regional tensions following the U.S. killing of Iranian General Qassem Soleimani on January 3, 2020, and Iran’s retaliatory missile strikes on U.S.-occupied Iraqi airbases on January 7. This geopolitical context had already created confusion about U.S. troop movements, exemplified by an earlier erroneous draft letter suggesting a withdrawal from Iraq. Cybersecurity researchers had warned of anticipated disinformation campaigns exploiting the crisis, though no attribution for the KUNA hack was established. The false withdrawal narrative amplified existing uncertainties about military deployments during a critical diplomatic period, coinciding with U.S. President Trump’s January 8 announcement of new economic sanctions against Iran in lieu of military escalation. Kuwaiti authorities maintained operational continuity of their news services while addressing the social media compromise through public disavowals and investigative measures.