Israeli Information Security Manager Charged in Massive Cyberattack

Israel's State Prosecution has filed an indictment against Michael Bar, a 43-year-old resident of Ashkelon, for allegedly conducting years-long cyberattacks against Israeli companies and individuals. Bar is accused of stealing business and personal data from compromised computers, using malicious software he developed with artificial intelligence tools. The indictment claims that from 2019 until his arrest three weeks ago, Bar remotely infiltrated the computers of 26 Israeli companies and private individuals.

Bar, who previously served as an information security manager for a company overseeing construction and home design firms, allegedly exploited his technical expertise to bypass security systems, steal sensitive information including files, passwords, and account access details. The prosecution asserts that his control over the infected computers allowed him to remotely operate them, activate cameras without users' knowledge, and record their activities. The malicious software reportedly continued to function even after computers were shut down.

A particularly serious accusation involves intimate photos of female employees and their minor daughters, taken by computer cameras while they were at home or in hotels. Bar allegedly organized this sensitive data, including passwords and media files, into folders categorized by victim identity.

The cyberattacks were reportedly discovered in April 2026 when one of the targeted companies investigated a suspected breach, leading to the realization of a broader attack against Israeli businesses. When informed of the suspicion, Bar, in his role as security manager, allegedly concealed his involvement while continuing his activities and developing more sophisticated malware.

The indictment charges Bar with multiple offenses, including unlawful computer intrusion, illicit software operations, introducing viruses, privacy violations, and theft. The State Prosecution is seeking his detention until the conclusion of legal proceedings, citing his advanced technological skills and the extensive nature of his alleged activities, which also targeted employees' personal computers.