Israel Ministry of Defense Hacked & Leaked by ClayOxtymus1337

Data Breach Summary

On July 1, 2025, threat actor “ClayOxtymus1337” announced a successful breach of Israel’s Ministry of Justice on DarForums.st, citing retaliation for the three recent wars and accusing the ministry of targeting Iran first. The attacker threatened public release of the data as a stand against the “Zionists.” The Ministry of Defense (MOD), located in HaKirya, Tel Aviv, is clarified here: it’s a distinct government body responsible for military protection under the Israeli Minister of Defense.

---

Where and How?

The leak was posted on DarForums.st, a notorious dark web forum. ClayOxtymus1337 claims the hack was politically motivated, targeting sensitive Israeli government systems. Although the specific breach vector—like phishing, exploitation, or insider access—is not detailed, it echoes previous patterns of hacktivist atrocities during periods of regional conflict.

Company Data Breach History

Publicly reported breaches of Israel’s Justice and Defense Ministries include:

• April 2024: Hacktivist group “Anonymous for Justice” breached the Ministry of Justice, exfiltrating approximately 300 GB. The ministry confirmed a “cyber incident” and stated operations remained fully functional
• April 2024: Cyber Express and other outlets corroborated prior unauthorized access, naming ~300 GB of data obtained and threatening further releases .
• April 2024: Defense Ministry network access was also reported; security sources acknowledged theft of ~100 GB, though confirmed sensitive infrastructure was unaffected

This new leak appears to target the same ministry but is distinguished by political motives and timing—coming during escalated regional tensions in mid‑2025.

---

Recommendations for Personal & Institutional Security

For Government Administrators:

• Launch immediate incident response and forensic analysis to confirm breach scope and techniques.
• Realign and strengthen access controls, multi‑factor authentication, and network monitoring.
• Publicly communicate incident details (as legally permissible) to rebuild trust and allow affected individuals to act.
• Monitor dark web forums for further threats or data drops.

For Individuals (especially inside ministry/affiliated roles):

• Expect potential phishing attempts linked to this breach—remain vigilant.
• Monitor your professional credentials and personal information across platforms.
• Use strong, unique passwords and enable 2FA where available.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.