A significant cyber attack has unfolded in Israel, impacting around 40 companies, including major retailers like Keter, Osem, and Strauss, as well as government entities such as the Nature & Parks Authority and the Ministry of Health. The assault targeted the website hosting company Signature-IT, causing disruptions in online activities for its client companies, particularly those involved in e-commerce.
The National Cyber Directorate clarified that the attack did not directly compromise the targeted companies but rather the servers of Signature-IT, the provider of online shopping solutions and website hosting services. Notably, the Home Center and Kravitz chains experienced online store shutdowns over the weekend, with the Home Center website explicitly acknowledging a “cyber-terrorist attack.”
The National Cyber Directorate emphasized that the attack’s impact extended beyond disrupting websites, as the attackers also gained access to mailing lists stored on Signature-IT’s servers. This unauthorized access enabled the distribution of SMS messages and emails with hateful content to thousands of Israelis.
While credit card numbers were reportedly not stored on the servers, concerns arose about potential data breaches. The compromised mailing lists contained personal information such as full names, phone numbers, email addresses, physical addresses, and purchase history. This data breach raises the specter of future targeted phishing attacks utilizing the acquired information.
Signature-IT, the targeted website hosting company, disclosed that approximately 40 companies suffered as a result of the cyber attack, most of which operate in the e-commerce sector. The affected companies include major entities like IKEA Israel, Tnuva, and Unilever, along with government bodies like the State Archives and the Ministry of Labor & Welfare.
Although not all of Signature-IT’s clients were impacted, the full list of affected entities has yet to be disclosed. As the aftermath unfolds, the incident highlights the vulnerability of critical service providers and the potential ripple effects on numerous businesses and government agencies relying on their services.