Iranian Hackers Say They Raided Herzi Halevi's Phone: Why the Qatar and Jordan Leak Matters Even if Parts Remain Unproven
Even when a hacktivist leak is messy, selective and partly unverifiable, it can still reshape the perception of who talks to whom in the region.
Cyber leaks do not need to be complete to be strategically damaging. They only need to reveal enough truth to make denial feel unstable.
That is why the alleged breach involving former Israeli military chief Herzi Halevi matters. The Iran-linked or Iran-aligned hacker group Handala says it obtained thousands of files from devices or accounts connected to Halevi and released photos, videos and documents pointing to sensitive travel, including reported contacts touching Qatar and Jordan. CNN, according to secondary summaries, reported that at least some of the leaked images were considered authentic by an Israeli source familiar with the matter.
That still leaves huge gaps. A leak can contain real material and false framing. A hacked cache can be authentic in part and manipulated in narrative presentation. Metadata can be missing. Context can be stripped. Selective release is not neutral archiving; it is information warfare.
But that does not mean the story is trivial. Quite the opposite.
The strategic power of this kind of leak is not just in the files themselves. It is in what they force into public conversation. If there were discreet contacts, private meetings, or sensitive coordination between Israeli military leadership and Qatari or Jordanian counterparts, those conversations were presumably kept quiet for a reason. Making them visible — even partially, even selectively — changes the political cost of those relationships.
Qatar already navigates a complicated role as mediator, host, and back-channel partner. Jordan balances a public posture of Palestinian solidarity with a deep security relationship with Israel. Neither benefits from having alleged interactions with a former Israeli chief of staff plastered across Telegram channels and news wires.
That is the real weapon: not the files, but the embarrassment. A leak makes every future contact slightly more cautious, slightly more deniable, and slightly more expensive in domestic political terms.
And there is a second-order effect. If Iran-aligned hackers can breach devices linked to one of Israel's most senior former military figures, the signal to other officials is obvious: your operational security may not be as strong as you think. That chilling effect extends beyond the specific data released. It changes behaviour, communication discipline, and the willingness of officials to use commercial devices for sensitive discussions.
Whether the full scope of Handala's claims is accurate remains genuinely uncertain. Some images may be real, some context may be fabricated, and some alleged documents may be selectively framed to maximize damage. That ambiguity is itself a weapon.
So the Halevi leak matters not because it proves every claim the hackers make. It matters because it disrupts trust between allies, imposes costs on back-channel diplomacy, and demonstrates that cyber operations in this war are not just about infrastructure. They are about relationships.