Hacktivists Deface US Army Websites
On July 7, 2026, it was reported that the U.S. Army fixed two of its websites after they were defaced by hacktivists. The defacements displayed pro-Kurdish messages and explicitly called out President Donald Trump. This incident marks the latest case of hackers compromising federal government systems in recent months.
According to Cyberscoop, which first reported the defacements, a security researcher disclosed that error pages were modified on two U.S. Army websites: the Open Innovation Lab and the AI Integration Center. These sites are used to test and integrate artificial intelligence and other technologies into emerging military capabilities.
The Defacement Details
The defaced messages appeared when a visitor attempted to access a non-existent webpage on those sites. The error pages had been altered to include accusations labeling Trump as a “pedophile” and a “thief,” likely referencing the president’s extensive naming in Justice Department files related to late financier and convicted sex offender Jeffrey Epstein. The messages also mentioned Tom Barrack, the current U.S. ambassador to Turkey, and called for a “free Kurdistan.”
The defacements were visible as of Monday, according to Cyberscoop. After being contacted by the publication, the Army took the pages down shortly thereafter.
Investigation and Response
The U.S. Army did not explain how the error pages were defaced. The Army’s websites reportedly run on WordPress and rely on several plugins, which can be exploited by hackers seeking to break into websites. It remains unclear whether any data was stolen during the incident. Cyberscoop noted that the Army is investigating the matter.
A spokesperson for the U.S. Department of Defense did not respond to TechCrunch’s request for comment.
WordPress Vulnerabilities
The involvement of a WordPress-based infrastructure with multiple plugins raises the possibility that the attack exploited known vulnerabilities in these components. Hacktivists commonly deface websites to draw attention to political causes, though such attacks are not typically associated with data theft.
Broader Context of Hacktivist Attacks
Earlier this year, hacktivists targeted the U.S. Department of Homeland Security, publishing records on contracts that enable U.S. immigration authorities, such as ICE, to carry out deportations. Additionally, the Department of Homeland Security confirmed another breach this week, after hackers compromised a system used for sharing information among state, local, and federal authorities.
These incidents underscore ongoing cybersecurity challenges faced by federal agencies, as politically motivated actors continue to probe and exploit vulnerabilities.