Last Updated: July 2026

Unit 8200

Unit 8200 is a military intelligence unit the largest of its kind within the Israeli Military Intelligence Directorate (AMAN), equivalent in function to the NSA in the U.S.. It is responsible for electronic warfare, cyber operations, and mass surveillance across Gaza, the West Bank, and beyond. The unit operates a vast surveillance apparatus that monitors every aspect of Palestinian life (phone calls, medical records, sexual orientation, and family relationships) to build intelligence dossiers used to coerce Palestinians into collaboration with the occupation.

Unit 8200 also functions as a pipeline to channels its veterans into the Israeli tech industry. The 8200 Alumni Association numbers approximately 14,000 veterans who maintain reservist obligations into their early 40s while founding and staffing startups, venture capital firms, and cyberwarfare companies that supply surveillance and offensive hacking tools to governments worldwide.

Unit 8200 has been directly implicated in war crimes including mass surveillance of civilian populations, the development and deployment of AI-powered targeting systems that generated automated kill lists in Gaza, the September 2024 terrorist attack on Lebanese civilians using exploding communication equipment, and the use of Microsoft Azure cloud infrastructure to store and process surveillance data used to plan airstrikes during the genocide on Gaza, as documented in a joint investigation by +972 Magazine, Local Call, and The Guardian.

Mass surveillance of Palestinians

Unit 8200 maintains comprehensive surveillance of the Palestinian population in Gaza and the West Bank. A 2014 public refusal letter signed by 43 Unit 8200 veterans and reservists documented the unit's systematic collection of intimate data on Palestinians including sexual orientation, infidelity, medical conditions, and financial difficulties. This information is gathered to build coercive leverage; Unit 8200 veterans testified that the unit used this material to blackmail Palestinians into becoming informants for the occupation.

The intelligence gathered against innocent Palestinians is what allows for political persecution and division within Palestinian society through the recruitment of collaborators and by driving parts of Palestinian society to turn against itself, the veterans wrote.

A joint investigation by +972 Magazine, Local Call, and The Guardian published in August 2025 revealed the scale of this surveillance: Unit 8200 has stored recordings of millions of Palestinian phone calls from Gaza and the West Bank on a customized Microsoft Azure environment, and this data was used to plan airstrikes.

AI-powered targeting and kill lists

Unit 8200 developed and deployed multiple AI-powered targeting systems during the genocide on Gaza that automated the generation of kill lists with minimal human oversight. A +972 Magazine and Local Call investigation published in April 2024 documented three systems in operational use:

Lavender

Lavender is an AI system designed to identify and mark Palestinians as suspected militants for assassination. According to intelligence sources who spoke to +972 Magazine and The Guardian, Lavender generated a kill list of up to 37,000 Palestinians in the early weeks of the genocide, with an estimated 10% error rate. Human operators spent approximately 20 seconds reviewing and approving each target before strikes were authorized. The system was designed to operate at industrial scale.

IOF intelligence officers were given pre-authorized quotas allowing 15 to 20 civilian deaths per low-ranking militant. Attacks were typically carried out using unguided "dumb bombs" on family homes, destroying entire buildings and killing all occupants. One intelligence source told The Guardian:

We were not interested in killing Hamas operatives only when they were in a military building or engaged in a military activity. It's much easier to bomb a family's home. The system is built to look for them in these situations.

Gospel

Gospel is a targeting system that generates building and infrastructure targets for airstrikes. Unlike Lavender, which targets individuals, Gospel automates the selection of structures such as residential buildings, public facilities, and government offices. Intelligence sources told +972 that the IOF prioritised "quantity over quality" of targets, with Gospel producing hundreds of targets per day during intensive bombing phases.

Where's Daddy?

Where's Daddy? is a tracking system that monitors targeted individuals and flags when they enter their family homes, enabling airstrikes at the moment when family members, including children, are present. This system was used to carry out attacks that killed entire families in single strikes during the genocide.

Microsoft Azure: the surveillance backbone

Microsoft's Azure cloud platform serves as a critical infrastructure for Unit 8200's surveillance and targeting operations. A joint investigation by +972 Magazine, Local Call, and The Guardian published in August 2025 documented that Unit 8200 uses a customized Azure environment to store and process the IOF's intelligence trove.

The investigation found that 11,500 terabytes of Israeli military data is stored on Azure servers — spanning multiple intelligence units including Unit 8200, Matzov (encryption), Mamram (computing), and Tikshuv (IT). Usage spiked 155% between June 2023 and April 2024, directly correlating with the genocide on Gaza. Azure OpenAI services comprise 75% of the Israeli military's AI service usage, and GPT-4 consumption increased twentyfold during the genocide. Microsoft engineers have provided direct technical support to IOF surveillance units, enabling real-time data analysis and operational coordination.

This revelation have forced Microsoft to eventually terminated Unit 8200's access to specific cloud storage and AI services used in the surveillance project — the first time a US tech company had withdrawn services from the Israeli military during the genocide. But Microsoft's action was narrow: the company confirmed the decision did not affect its wider commercial relationship with the IOF, which remains a longstanding client retaining access to other services. Unit 8200 moved the surveillance data out of Azure within days of the Guardian's publication and planned to transfer it to Amazon Web Services (AWS), another U.S. based tech company.

Training AI on intercepted Palestinian conversations

In March 2025, +972 Magazine and Local Call revealed that Unit 8200 is training a ChatGPT-style large language model on millions of intercepted Palestinian Arabic conversations. The model is designed to expand the unit's capacity for surveillance, incrimination, and arrest of Palestinians by automating the analysis of intercepted communications at a scale impossible for human analysts.

The investigation detailed that Unit 8200 has been collecting and transcribing Palestinian phone calls for years, building a corpus of millions of conversations. This dataset is now being used to train an AI model that can flag individuals for surveillance, arrest, or targeting based on automated analysis of speech patterns, keyword detection, and network mapping. Unit 8200 moving from reactive monitoring to predictive targeting powered by AI trained on the private conversations of an occupied population.

2024 Lebanon attacks

In September 2024, thousands of pagers and handheld communication devices exploded simultaneously across Lebanon in a coordinated attack widely attributed to Unit 8200. The devices had been sabotaged with small amounts of stable explosive implanted during the supply chain, turning everyday communication tools into weapons. Twelve people were killed and thousands injured, including civilians.

UN human rights experts condemned the attacks as a "terrifying violation of international law", specifically citing the prohibition on booby-trapping objects that appear harmless but are designed to kill or maim, and called for an independent international investigation.

The reservist model: permanent entanglement with the occupation

Unit 8200 operates on a reservist model that permanently entangles its veterans with active military operations. After completing mandatory service, Unit 8200 veterans, like all IOF soldiers, remain in the reserves until their early 40s, with an annual commitment of up to three weeks of active duty. During periods of escalated military operations, reservists are called up for extended service.

This model means that founders, executives, and employees of Israeli tech companies who passed through Unit 8200 maintain active military roles in the same units conducting surveillance, targeting, and combat operations against Palestinians. Following October 7, 2023, 81% of startups in the 8200 EISP accelerator cohort had founders or employees called up to reserve duty, with 31% actively serving during the program.

The 8200 Alumni Association

The 8200 Alumni Association is the formal organization that manages the pipeline from military intelligence to tech industry. With approximately 14,000 members, the Association runs the EISP (Entrepreneurship and Innovation Support Program) startup accelerator, which has graduated over 200 startups with cumulative fundraising exceeding $1 billion. The accelerator is sponsored by major corporations including Amazon Web Services.

Veterans serve approximately 30 to 60 days per year on active reserve duty until age 40 to 45, maintaining direct operational continuity between their civilian roles and military intelligence work.

EISP's wartime cohort launched after October 7 is explicitly branded as adapted to "war constraints," embedding the accelerator program directly into the genocide on Gaza. Mentors and advisors include partners at Israeli venture capital firms Grove Ventures, Vertex Ventures, and Strait Capital, alongside founders of companies acquired by Cisco, Microsoft, and Oracle.

The revolving door

The Unit 8200 alumni pipeline has produced some of the most valuable exits in Israeli tech. Wiz, founded by four Unit 8200 veterans including, was acquired by Google for $32 billion in 2025. Nearly 50 Wiz employees had served in Unit 8200.

Unit 8200 alumni have founded or hold key positions at Check Point, Palo Alto Networks, NSO Group (maker of Pegasus spyware), Verint, Nice Systems, and Cybereason, alongside hundreds of cybersecurity and surveillance startups that commercialize capabilities developed within military intelligence.

Veterans of Unit 8200 and related intelligence units found startups, secure venture funding from firms like Team8 (itself founded by Unit 8200 commanders), achieve exits to major US technology corporations including Microsoft, Google, Amazon, Cisco, and Oracle, and then cycle back into reserve duty. The corporations that acquire and invest in these companies become structurally embedded in the Unit 8200 pipeline, profiting from technology and talent developed within the occupation's intelligence apparatus while maintaining plausible distance from the war crimes that apparatus commits.

Sources:

+972 Magazine Microsoft storing Israeli intelligence trove used to attack Palestinians
+972 Magazine 'Lavender': The AI machine directing Israel's bombing spree in Gaza
+972 Magazine Israeli intelligence training ChatGPT-style model on Palestinian conversations
+972 Magazine Leaked documents expose deep ties between Israeli army and Microsoft
The Guardian 'The machine did it coldly': Israel used AI to identify 37,000 Hamas targets
The Guardian 'The Gospel': how Israel uses AI to select bombing targets in Gaza
The Guardian Microsoft blocks Israel's use of its technology in mass surveillance of Palestinians
The Guardian Head of Microsoft's Israel branch to step down after inquiry
The Guardian Microsoft to tighten human rights measures after inquiry into Israel's use of its tech
The Guardian Israeli intelligence veterans refuse to serve in Palestinian territories
The Guardian Pager and walkie-talkie attacks on Hezbollah were audacious and carefully planned
Reuters Hezbollah pager attack puts spotlight on Israel's cyber warfare Unit 8200
Forbes Unit 8200: Israel's Military-Intelligence Cyber Powerhouse That Spawned A $100 Billion Tech Ecosystem
Middle East Eye Google playing with fire acquiring Israeli company founded by Unit 8200 veterans
B'Tselem Black Box: Unit 8200 and the Occupation
OHCHR Exploding pagers and radios: A terrifying violation of international law, say UN experts
UN Human Rights Council Report A/HRC/59/23 — From economy of occupation to economy of genocide
8200 EISP The Program
Calcalist EISP 8200 and 8200 Impact join forces to launch cohort for wartime startups
The Times of Israel 8200 start-up boot camp turns entrepreneurs into tech warriors
MintPress News Meet Toka, the Most Dangerous Israeli Spyware Firm You've Never Heard Of

Related Companies18