Iran-linked hackers have stepped up cyberattacks on Israel since the war began, wiping the data of over 50 small businesses and compromising dozens of security cameras, according to an Israeli official.
Yossi Karadi, the director-general of the Israel National Cyber Directorate, told reporters on Tuesday that Iran had not infiltrated or disrupted critical infrastructure such as energy grids, banks or hospitals.
Israel, the US and Iran have for years been engaged in covert cyber operations designed to collect sensitive data or sabotage infrastructure. While Iran rarely acknowledges any impact, its energy minister this week said water and electricity facilities were damaged in a cyberattack it blamed on the US and Israel.
According to Karadi, hackers affiliated with Iran have destroyed the data of over 50 small Israeli companies in the past few weeks, an unusually high number, he said. Most of the targeted companies had existing cybersecurity vulnerabilities, said Karadi. Companies with stronger cybersecurity protections weren’t affected, he said. He did not identify the victims, adding that most have since restored operations.
Earlier this month, pro-Iran digital activist group Handala carried out a cyberattack against US medical technology maker Stryker Corp., temporarily crippling the company’s global operations. The FBI later tied the Handala group to Iranian intelligence services.
Read more: Stryker Attack Mirrors Tactics Used in Iran‑Aligned Hacks
Karadi, who oversees the digital defense of civilian infrastructure, said his agency was also grappling with Iran’s hacking of public cameras in Israel. The agency said Iran had previously used hacked home security cameras during the June conflict to aid missile targeting and surveillance.
Some 50 cameras have been hacked in the past three weeks, he said, describing the breaches as a challenge for security personnel. Officials quickly resolved those compromises, according to the cyber directorate.
Most cyber operations targeting Israelis involve social engineering or influence campaigns, some of them targeting defense officials or relatives of fighter pilots, he added.
The pace of attacks has not subsided despite what observers have described as a near-total internet blackout in Iran since the war began last month.
“Some of them are using satellite capabilities, but there are also other ways that they can use to continue doing cyberattacks,” Karadi said.
On Sunday, Iran’s energy minister accused the US and Israel of launching attacks against its electricity and water facilities, according to the semi-official ISNA news agency. The attacks damaged parts of critical water supply networks, according to the report.
Photograph: A person typing at a backlit computer keyboard. Photo credit: Chris Ratcliffe/Bloomberg
Copyright 2026 Bloomberg.
Topics
Cyber
Interested in Cyber?
Get automatic alerts for this topic.
