CSIDB logo
Incident

Hayalim Almonim

Incident posture

Attack window
Feb 2021
Location
United States of America
Status
Historical
CIA posture
Available to members
Updated
2025-12-16 00:00

Linked entities

Victim
Hayalim Almonim
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
Feb 2021
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A collective of Israeli anti-fascist hackers operating as Hayalim Almonim breached a Ku Klux Klan-affiliated group's website, extracting and publicly releasing members' personal information including names, photos, phone numbers, and addresses—specifically identifying the alleged leader. They defaced the site with anti-racist messages and exposed a senior member's presence on a public sex offender registry for child sexual assault. Claiming affiliation with the broader Antifa movement, the hackers declared intent to dismantle fascist organizations through such operations, referencing prior attacks against similar groups and vowing continued action to intimidate white supremacist networks.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

3 techniques

Description

On or around February 4, 2021, a collective of Israeli hackers operating under the name Hayalim Almonim (Hebrew for "Anonymous Soldiers") breached the website of the Patriotic Brigade Knights, a group allied with the Ku Klux Klan (KKK). The hackers, who identified themselves as part of the anti-fascist Antifa movement, scraped and publicly disseminated sensitive personal information belonging to the group's members via social media. This included the name, phone number, and address of the Patriotic Brigade Knights' alleged leader. Additionally, the hackers defaced the compromised website by replacing portions of its content with a banner reading "Shabbat Shalom! Goodnight white pride" and shared a link to the Texas Public Sex Offender Registry, highlighting a senior member's prior conviction for sexually assaulting a 14-year-old girl.

The attackers explicitly stated their intent was to "strike terror into the hearts of the enemies of humanity" and declared that facilitating "fascistic terrorist activity" would no longer be tolerated. In communications with the Jerusalem Post and BBC News, one hacker warned of further actions, vowing to continue until they "finish the Klan" and deliver a "death blow to fascism in the United States." They urged other anti-fascists to emulate their tactics, asserting this would make the "enemies of mankind tremble with fear." This incident followed a prior attack by Hayalim Almonim against the Church of the Ku Klux Klan, which the hackers claimed had operations across 25 U.S. states. The breach resulted in the permanent exposure of the targeted group's internal data, operational disruption through website defacement, and public reputational damage stemming from the release of incriminating personal records.

Sources

Sources available to members: 1 source.

CSIDB