Iran was behind a cyberattack at an Israeli hospital on Yom Kippur that led to a leak of patient data, Israel’s National Cyber Directorate said Wednesday.
At the time, Israeli authorities said the attack at Shamir Medical Center in the central city of Be’er Yaakov had been “blocked in its initial stages,” and blamed a Russian-speaking cybercrime organization. The organization, called Qilin, appeared to have demanded a $700,000 ransom in exchange for withholding the leaked data.
But on Wednesday, the directorate said the attack was a prominent example of a wave of Iran-backed cyberattacks on Israeli businesses and government institutions. In these attacks, the agency said, hackers gain access to usernames and passwords and use them to infiltrate systems.
There have been at least 10 such cyberattacks, the directorate said, adding that they were stopped “quickly and efficiently.” The attacks appear to be part of a long-running Iranian effort to penetrate Israeli institutions and government agencies through espionage, recruitment of agents and other methods of subterfuge.
“Over the course of recent weeks, the National Cyber Directorate has identified a trend of a wave of cyberattacks against companies that offer computer services to many companies in the economy,” the statement said.
Get The Times of Israel’s Daily Edition
by email and never miss our top stories
By signing up, you agree to the terms
The statement continued: “Among the bodies that were attacked in the wave of Iranian attacks were Shamir Medical Center (Assaf Harofeh), where the attackers tried to interfere with hospital operations, without success.”

Iran is upping its cyberwarfare tactics, and is likely to only increase them further regardless of a potential Israel-Hamas ceasefire. (iStock photo/ mirsad sarajlic)
Israeli officials acknowledged that patient data was leaked during the attack. But Yosi Karadi, the head of the directorate, praised the government’s work blocking the hackers.
“Thanks to the cooperation, quick information sharing and targeted reaction, the events were shut down quickly and efficiently, avoiding wider damage to the economy, ” he said in the statement. “In the case of Shamir Medical Center, beyond the data leak, the very attempt to damage an Israeli hospital means a red line has been crossed, which could have led to an attack on human life.”
Earlier this year, cyber officials warned that Iranian and Hezbollah attacks against Israel have tripled since the Hamas onslaught of October 7, 2023, which sparked the grueling war in Gaza.
In May, Aviram Atzaba, the Cyber Directorate’s head of international cooperation, said that around 800 significant attacks had been thwarted since the war erupted. Among the targets were government organizations, the military and civil infrastructure.
Some attacks could not be foiled, including past incidents against hospitals in the cities of Haifa and Safed in which patient data was stolen.
In January, Iranian hackers managed to infiltrate panic buttons in some 20 Israeli kindergartens, using the systems’ loudspeakers to broadcast rocket sirens and Arabic songs supportive of terrorism.
Is The Times of Israel important to you?
If so, we have a request.
Every day, even during war, our journalists keep you abreast of the most important developments that merit your attention. Millions of people rely on ToI for fast, fair and free coverage of Israel and the Jewish world.
We care about Israel – and we know you do too. So today, we have an ask: show your appreciation for our work by joining The Times of Israel Community, an exclusive group for readers like you who appreciate and financially support our work.
Already a member? Sign in to stop seeing this
You appreciate our journalism
You clearly find our careful reporting valuable, in a time when facts are often distorted and news coverage often lacks context.
Your support is essential to continue our work. We want to continue delivering the professional journalism you value, even as the demands on our newsroom have grown dramatically since October 7.
So today, please consider joining our reader support group, The Times of Israel Community. For as little as $6 a month you’ll become our partners while enjoying The Times of Israel AD-FREE, as well as accessing exclusive content available only to Times of Israel Community members.
Thank you,
David Horovitz, Founding Editor of The Times of Israel
Already a member? Sign in to stop seeing this