Cyber Incident Victim: LHB Ltd
Date:
Apr 2015
Location:
Israel
Summary
A hacktivist group breached an Israeli arms importer's website, leaking extensive customer data including login credentials, personal details, IP addresses, and government officials' email addresses. The attackers published the compromised database in segments as part of OpIsrael, a coordinated campaign targeting Israeli digital infrastructure that also involved defacing websites, stealing social media credentials, and diverting funds to pro-Palestinian causes through affiliated groups. The compromised information appeared authentic and previously undisclosed, impacting both domestic and international clients across civilian, private, and institutional sectors.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On April 11, 2015, the hacktivist collective Anonymous breached the website of Israeli arms importer LHB Ltd. (lhbltd.com) as part of its annual OpIsrael campaign. The attackers exfiltrated and publicly leaked the company’s complete customer database, partitioning the data into three separate files hosted on Pastie sites. The compromised records included login credentials, IP addresses, government-issued IDs, email addresses, physical addresses, usernames, personal phone numbers, and professional titles belonging to both domestic and international clients. Forensic analysis confirmed the authenticity of the data, which had not been previously exposed, and identified 16 email addresses associated with Israeli government officials. Anonymous defaced the site with a message declaring, "OpIsrael 2015, Hello Israel, We are Anonymous, We are Legion, We do not forgive, we do not forget. Israel, Expect US." Media outlet Hackread contacted LHB Ltd. for comment but received no immediate response.
The intrusion occurred within Anonymous’ declared April 7–20, 2015, operational window targeting Israeli digital infrastructure, during which the collective compromised hundreds of Facebook accounts, social media profiles, and PayPal credentials while defacing over 100 websites. Parallel operations by affiliated group AnonGhost resulted in the theft of Israeli credit card data and an $18,000 donation to pro-Palestinian charities using illicitly obtained funds. LHB Ltd., specializing in arms and ammunition importation, distribution, and servicing for civilian, private, and institutional markets, maintained longstanding local and international client relationships prior to the breach. The exposure of sensitive customer data—particularly records tied to government personnel—represented a significant compromise of client confidentiality for a company operating in the defense sector. No details regarding LHB’s internal detection mechanisms, containment procedures, or forensic remediation efforts were disclosed in available reporting.