Israeli reservist charged with leaking Iron Dome data to Iran in wartime espionage case
Second breach in 14 months exposes vulnerabilities in Israel's reserve personnel vetting as Tehran systematically targets air defense operators through social media recruitment.
Raz Cohen, a 26-year-old IDF reservist serving in an Iron Dome air defense battery, was arrested and charged with espionage on 20 March 2026 for transmitting operational intelligence to Iranian handlers in exchange for cryptocurrency payments during active conflict.
The indictment, filed in Jerusalem District Court, alleges Cohen maintained continuous contact with Iranian intelligence agents for several months via social media, passing information on Iron Dome activity, military site locations, and names of Israeli security officials, according to Haaretz. The case was investigated by Shin Bet, Israel Police Lahav 433 unit, and the Military Police Investigative Unit.
Israel operates a three-tier Air Defense system: Iron Dome (short-range, 4-70km), David’s Sling (medium-range, 40-300km), and Arrow 2/3 (long-range ballistic missiles). Exposure of Iron Dome operational parameters—including response times, intercept patterns, and coverage gaps—provides adversaries with critical intelligence for saturating defenses or timing strikes.
Pattern of reserve personnel compromise
This marks the second Iron Dome unit espionage case in 14 months. In January 2025, IDF reservist Yuri Ilyaspov, 22, was indicted for sharing classified Iron Dome footage with Iranian handlers, receiving $2,500 in compensation, reported the Jerusalem Post. Superintendent Sarit Peretz of Israel Police Lahav 433 stated at the time that the leaked video “contains very sensitive information” that could enable adversaries to “act against the State of Israel.”
Cohen faces charges of aiding the enemy during war (carrying potential life imprisonment or death penalty), transmitting information to the enemy with intent to harm state security, and transmitting information likely to assist the enemy. The Times of Israel confirmed Cohen received financial compensation in cryptocurrency for conducting security missions.
20+
$2,500
Social media/cryptocurrency
Iran’s systematic recruitment campaign
More than 20 cases of Israeli citizens and soldiers accused of spying for Iran have emerged since October 2023, recruited via social media with financial incentives or cryptocurrency, per Haaretz reporting from September 2025. Iranian operatives initially assign innocuous tasks—graffiti, photographing buildings—then escalate to intelligence gathering, surveillance, and assassination plots.
Starting in mid-2024, Iranian officials began tasking recruits to carry out arson and murder plots targeting Israeli scientists, journalists, security and military leaders. Israel Police Superintendent Maor Goren called the spike in plots “unprecedented,” with several murder plots planned within nine days of initial recruitment, according to the Washington Institute.
“Over the course of the war, Israeli intelligence treated Iran like its backyard playground, recruiting sources, both Iranian citizens and citizens of neighboring countries, and inserting its operatives to gather intelligence. Now, Iran aims to turn the tables on Israel by increasing its own network of people in Israel recruited to spy for Iran.”
OPSEC failures in reserve personnel vetting
The repeated compromise of reserve personnel in critical air defense roles exposes structural vulnerabilities in Israel’s wartime Counterintelligence. Reserve units grant access to sensitive operational data without the continuous monitoring applied to career military personnel. Cohen’s months-long contact with Iranian agents went undetected despite serving in a unit central to Israel’s defense against projectile attacks.
In a joint statement, Israel Police and Shin Bet warned: “The Israel Police and the Shin Bet once again warn citizens and residents of the State of Israel against having contact with foreign agents from enemy countries, or unknown officials. All the more so, performing missions for them in exchange for payment or for any other reason.” The warning acknowledges that “intelligence and terrorist agents from enemy countries, continue their efforts to recruit and use Israelis for security, espionage and terrorist missions in Israel including during the current war.”
- Cohen is the second Iron Dome reservist charged with espionage in 14 months, indicating systematic Iranian targeting of air defense personnel.
- Over 20 Israelis have been accused of spying for Iran since October 2023, recruited via social media with cryptocurrency payments.
- Iranian recruitment escalated from basic tasks to assassination plots within days of initial contact, per police assessments.
- Exposure of Iron Dome specifications compromises Israel’s ability to defend against saturation attacks and coordinated strikes.
Implications for NATO intelligence sharing
The breach occurs as Israel and NATO recently signed a bilateral agreement aimed at protecting the exchange of classified intelligence between the organization and Israel. Repeated compromises of air defense data raise questions about institutional safeguards governing shared defensive technology during active conflict, particularly as NATO allies contribute surveillance assets and early-warning systems to Israel’s layered defense architecture.
Israel’s three-tier system—Iron Dome for short-range threats (4-70km), David’s Sling for medium-range (40-300km), and Arrow 2/3 for long-range ballistic missiles—integrates data from U.S. early-warning satellites and regional radar installations, noted Al Jazeera. Compromise of operational parameters at any tier potentially exposes allied capabilities.
What to watch
Cohen’s trial will test the application of wartime espionage statutes carrying death penalty provisions, setting precedent for future cases. Watch for operational security reforms in reserve personnel vetting, particularly for units handling sensitive defensive systems. Monitor whether NATO allies adjust classified intelligence-sharing protocols with Israel in response to demonstrated insider threat vulnerabilities. Track whether Iran’s recruitment campaign expands beyond individual operatives to target personnel in allied militaries operating in the region. Finally, observe whether Israel’s counterintelligence agencies shift resources toward social media monitoring and cryptocurrency transaction analysis to detect early-stage recruitment efforts before classified material is compromised.