The OSINT factor in Hamas’ operational success and Israel’s intelligence failure
December 5, 2023 1 Comment
IT HAS BECOME CLEAR that Hamas had up-to-date intelligence on Israeli targets prior to the attack on October 7, 2023, the largest and most devastating terrorist attack in Israel’s history. Hamas did not have access to clandestine information sources but rather relied on open-source intelligence (OSINT) to understand the structure and weaknesses of Israel’s defense system along the border fence. In addition to publicly available maps, Hamas meticulously gathered online intelligence about specific sites within the Israeli communities near the Gaza Strip.
It is also possible that some of the intelligence came from human intelligence (HUMINT) sources, largely through Gazan workers who were employed in Israel. Moreover, Hamas had access to constant Israeli media broadcasts, which supplied them with invaluable intelligence on the border communities and adjacent military facilities, as well as on communities that were located further to the north and east. Although the Israeli state exercises censorship in the
interests of national security, the public’s ‘right to know’ purview is substantial. Thus, significant amounts of information are available online.
In assessing the behavior of Hamas in recent years, one can observe that it did not act as a terrorist group for quite some time. Rather, it operated as a government organization, while monitoring its enemy and waiting patiently for an opportune moment to attack. Simultaneously, Hamas utilized disinformation tools to conceal its attack plans. It trained its fighters within commando units that employed information effectively and relied on actionable intelligence, rather than chance. This can be observed from interrogations of Hamas members who were detained by Israeli authorities after October 7. In one example, Hamas used detailed maps of Israeli communities near the Gaza border, which are available on Google Earth, to plan its attacks of October 7. Printouts of these maps were found among the belongings of Hamas assailants that were killed during the attacks.
Some in Israel are now advocating for increased protection of OSINT, particularly for Israeli sites related to security, including civilian first-response units, defense systems guarding settlements, and civil technological assets. However, implementing such measures within the current framework of Israel’s open society seems challenging. Despite the known importance of OSINT to Hamas and its potential risk to Israel’s security, significant changes in this regard may not occur, as they could impact the country’s democratic values. However, it is still possible to improve the quality of security censorship regarding sensitive civilian information that can be used by adversaries. Such moves would include protecting databases, limiting information relating to the addresses of senior officials, or putting in place stricter policies on the movement of Gazan workers in Israel.
Contrary to Hamas’, Israel’s OSINT systems underperformed in the run-up to the October 7 attacks. That was so especially after the central OSINT unit of
the Israeli Military Intelligence was dissolved, for reasons that remain to be investigated. CNN was among many news outlets that have revealed how Hamas advertised its military drills on social media, but somehow Israeli intelligence failed to pay attention to them.
When Hamas openly declared its intention to attack communities near the Gaza border, and trained its units for that purpose, the Israeli intelligence community, including the IMI and the Israel Security Agency (ISA), underestimated its real attack capabilities based on OSINT materials. This miscalculation stemmed from incorrectly assessing Hamas’s capabilities and overestimating the Israel Defense Forces’ ability to swiftly respond and prevent the attack on civil and military targets. Unfortunately, this assessment proved to be a significant mistake.
The effective use of OSINT lies at the heart of Hamas’ operational plan to attack simultaneously several Israeli targets and to cause extensive damage. It appears that Hamas was able to utilize the OSINT factor to its maximum extent, thus adding significant value to the success of the attack.
► Author: Dr. Avner Barnea | Date: 05 December 2023 | Permalink
Dr. Avner Barnea is research fellow at the National Security Studies Center of the University of Haifa in Israel. He served as a senior officer in the Israel Security Agency (ISA). He is the author of We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books, 2021).
SINCE OCTOBER 7, WHEN Hamas launched its surprise attack on Israel, many more details about the intelligence failure have emerged. It appears that Israeli intelligence officials have warned for years about military exercises held by Hamas in the Gaza Strip, which have included practice raids on cities deep inside Israel. However, the Israel Military Intelligence (IMI) did not heed to the warnings, because it considered Hamas operationally incapable of carrying out such raids. Instead, the IMI estimated that the Hamas leadership aimed to arrive at a settlement with Israel. That seems like the result of a highly successful disinformation operation, which added significantly to the effectiveness of the sudden attack on Israel on October 7.
large number of settlements simultaneously. It also believed that such an operation would go against the spirit of Hamas leadership’s spirit intention to settle with Israel.
Indeed, a preventive course of action should have been in place even in the absence of specific intelligence warnings —if only to enable the IDF to repel a surprise attack by Hamas. There was no need to estimate what Hamas would do in order to prepare for a surprise attack.
SEVERAL DAYS HAVE PASSED since October 7, the day when Hamas stunned Israel with a surprise attack against several settlements near the Gaza border. It is now clear that Israeli intelligence was in possession of warning indicators about the attack, and that these indicators were misjudged.
forwarded to Prime Minister Netanyahu’s office. The Israeli newspaper that
THE COMPARISON BETWEEN THE October 2023 attack on Israel and the Yom Kippur War is reasonable. We still have an obscured perspective on what happened on October 7. But even this partial picture makes it possible to draw a preliminary comparison. Undoubtedly, there is no precedent for such a monumental failure in the history of Israeli intelligence.
for the professionalism and resilience of the IDF, which was there in 1973, continues to exist.
LAST WEEK, LEBANON’S GENERAL Security Directorate
LAST WEEK, THE CHAIRMAN of the Israeli Religious Zionist Party, Bezalel Smotrich, who will soon be appointed as a cabinet minister, alleged that the Israel Security Agency (ISA) encouraged the killer of the late Israeli Prime Minister, Yitzhak Rabin. Smotrich’s allegation shocked many Israelis, because of the unfortunate timing —it was uttered close to the annual Remembrance Day for Prime Minister Rabin, who was assassinated by radical rightwing activist Yigal Amir 27 years ago. But also because of the unacceptable content, which echoes conspiracy theories that have accompanied Rabin’s assassination for many years. To counter these conspiracy theories, it is fitting to discuss the failure to defend Rabin that did occur under the responsibility of the ISA.
ISA to infiltrate extreme rightwing groups. The Committee did not ask: could the ISA’s intelligence have prevented the murder?
IN HIS NEW BOOK, We Never Expected That: A Comparative Study of Failures in National and Business Intelligence (Lexington Books), Dr. Avner Barnea has coined two new terms in the field of strategic surprise. One is diffused surprise and the other is concentrated surprise, two terms that help us to better understand why intelligence failures occur. In a diffused surprise there is difficulty in identifying the intelligence target and therefore the chance of a surprise increases; while in a concentrated surprise the intelligence target is usually a recognized organization. At the same time, the mistake lies in the assessment of the target’s abilities and intentions.


surprised observers with its range of weapons, such as long-range missiles with a reach that is in excess of 150 miles. This constitutes a strategic surprise for Israel. So far (May 13, 2021), Hamas has fired about 1,500 missiles at Israel, most of which have been intercepted by Israel’s air defense system called the Iron Dome.
LAST MONTH I WROTE an 








Analysis: Israel underestimated Hamas while overestimating its own capabilities
January 10, 2024 by intelNews 10 Comments
In the eyes of the Israeli generation of the Yom Kippur War, the possibility of such a failure happening again was unthinkable. Yet there is a significant difference between the events of 1973 and the events of last October 7. In 1973 the intelligence failed, but the IDF reacted quickly and acted efficiently. This
time, in the first two days of the conflict the IDF was confused and acted without direction, in the apparent absence of relevant action plans for what to do in the event of a massive invasion. The IDF was clearly not ready for such a scenario.
Recently, another important piece of information about the intelligence failure of October 7 was revealed. It was reported that, two months before the surprise attack by Hamas, information was received from an agent handled by the Israel Security Agency (ISA) in Gaza, with a “very high” reliability level. The agent allegedly reported that Hamas was planning “a major move in the week after Yom Kippur”. Yet that warning was not marked as significant; the assumption was that, if the warning materialized, it would be corroborated with additional intelligence. It was thus kept from higher levels of command and from Israeli Military Intelligence (IMI). The ISA did not deny the report, saying instead in a statement: “Focusing on one specific piece of news or another does not reflect the intelligence picture at the time”.
Given the high number of casualties and the horrendous destruction that resulted from the October 7 attack, many Israelis, including some in the security establishment, feel that it is far too long to wait until a commission of inquiry is established and publishes its conclusions. It will likely take at least two years
for those conclusions to become public. What is to be done in the meantime? There is public pressure to launch the inquiry soon.
Recently the State Comptroller of Israel, Matanyahu Engelman, announced that he has begun to investigate the intelligence failure. This is an appropriate move. However, with all due respect to the state comptroller’s inquiries, we know from previous experience that his findings have no teeth. For instance, in the context of Hamas, the state comptroller’s review of Operation TZUK EITAN (the 2014 Gaza War) was published in early 2017. It revealed serious instances of misconduct in the intelligence community dating several years prior to the operation. Yet this severe criticism passed below the public’s radar and was practically ignored, while no actions were taken against IDF and ISA security personnel that were shown to have acted irresponsibly.
I would like to point to a number of stronger factors that led to the tragic complacency of October 7, drawn from the field of psychology. It relates to how a country (mainly through its intelligence analysts) perceives its enemies and how this affects the evaluations of said enemies. We know that there was a conception on the Israeli side that Hamas had no interest in attacking Israel at this stage. It seems that the State of Israel underestimated Hamas and its leader, Yahya Sinwar, based on the available evidence of Hamas and Sinwar. Read more of this post
Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with 2023 Israel-Hamas War, Analysis, Avner Barnea, Hamas, Israel