Cyber Incident Victim: Hayalim Almonim
Date:
Feb 2021
Location:
United States of America
Summary
A collective of Israeli anti-fascist hackers operating as Hayalim Almonim breached a Ku Klux Klan-affiliated group's website, extracting and publicly releasing members' personal information including names, photos, phone numbers, and addresses—specifically identifying the alleged leader. They defaced the site with anti-racist messages and exposed a senior member's presence on a public sex offender registry for child sexual assault. Claiming affiliation with the broader Antifa movement, the hackers declared intent to dismantle fascist organizations through such operations, referencing prior attacks against similar groups and vowing continued action to intimidate white supremacist networks.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 3 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On or around February 4, 2021, a collective of Israeli hackers operating under the name Hayalim Almonim (Hebrew for "Anonymous Soldiers") breached the website of the Patriotic Brigade Knights, a group allied with the Ku Klux Klan (KKK). The hackers, who identified themselves as part of the anti-fascist Antifa movement, scraped and publicly disseminated sensitive personal information belonging to the group's members via social media. This included the name, phone number, and address of the Patriotic Brigade Knights' alleged leader. Additionally, the hackers defaced the compromised website by replacing portions of its content with a banner reading "Shabbat Shalom! Goodnight white pride" and shared a link to the Texas Public Sex Offender Registry, highlighting a senior member's prior conviction for sexually assaulting a 14-year-old girl.
The attackers explicitly stated their intent was to "strike terror into the hearts of the enemies of humanity" and declared that facilitating "fascistic terrorist activity" would no longer be tolerated. In communications with the Jerusalem Post and BBC News, one hacker warned of further actions, vowing to continue until they "finish the Klan" and deliver a "death blow to fascism in the United States." They urged other anti-fascists to emulate their tactics, asserting this would make the "enemies of mankind tremble with fear." This incident followed a prior attack by Hayalim Almonim against the Church of the Ku Klux Klan, which the hackers claimed had operations across 25 U.S. states. The breach resulted in the permanent exposure of the targeted group's internal data, operational disruption through website defacement, and public reputational damage stemming from the release of incriminating personal records.