Two Petabytes Worth Data of Israeli’s Siphoned, Says Cyber Head

Why It Matters

The magnitude of the data theft underscores a new risk tier for national security and private sector resilience, prompting urgent regulatory action to curb future large‑scale breaches.

Key Takeaways

• Two petabytes of data stolen from Israeli citizens and firms
• Phishing attacks rose 35% in 2025, amplifying breach risks
• Cyber influence campaigns surged 170%, targeting Israeli public discourse
• Israel ranks third globally for hacker targeting, prompting urgency
• Proposed cyber law mandates real‑time breach reporting to INCD

Pulse Analysis

The revelation that two petabytes of information have been siphoned from Israeli entities reshapes the benchmark for cyber‑risk assessment. Historically, breaches were measured in megabytes or gigabytes; today, the sheer volume rivals the digital holdings of major national libraries. This escalation forces security teams to rethink data classification, encryption, and exfiltration detection, as traditional perimeter defenses prove insufficient against actors capable of harvesting quadrillions of bytes.

Beyond raw data loss, the breach sits within a broader surge of hostile cyber activity. Phishing attempts rose 35% in 2025, serving as a gateway for deeper network intrusions, while influence operations increased 170%, aiming to manipulate public opinion and destabilize institutions. Israel now ranks third worldwide for hacker targeting, reflecting a convergence of state‑sponsored and criminal actors. The multi‑vector threat environment demands integrated threat intelligence, rapid incident response, and cross‑sector collaboration to mitigate cascading effects.

In reaction, the Israeli government is drafting a sweeping cyber‑law that codifies 63 minimum security controls and obliges organizations facing “grave” threats to report breaches to the INCD instantly. By aligning with NIST frameworks and enforcing real‑time disclosure, the legislation seeks to accelerate containment and reduce systemic fallout. If enacted before the upcoming election cycle, the law could set a regional precedent, compelling other nations to adopt similar reporting mandates and thereby strengthening global cyber resilience.