The Twitter and YouTube accounts for the United States Central Command (CENTCOM) were suspended today after they were infiltrated by hackers who claim to be affiliated with Isis.

For a time, the background images on both accounts were replaced with Isis imagery, as the hackers—who call themselves the CyberCaliphate—posted pro-Isis tweets and videos on Twitter and YouTube.

"American soldiers, we are coming, watch your back. Isis. CyberCaliphate," one tweet read.

"While the U.S. and its satellites kill our brothers in Syria, Iraq, and Afghanistan, we broke into your networks and personal devices and known everything about you," the message continued. "You'll see no mercy infidels. Isis is already here, we are in your PCs, in each military base. We won't stop! We know everything about you, your wives and children. U.S. soldiers! We're watching you!"

The group provided a link to Pastebin, which it said was "confidential data stolen from your mobile device."

That includes a spreadsheet of data about retired Army generals, like their addresses and personal emails. Other information about active Army personnel was also posted, though it was easily attainable data like their .mil email addresses.

The group also posted somewhat indecipherable screen shots of presentations for "scenarios" regarding countries like China and North Korea.

The hackers had control of the accounts for just under an hour. As of 2:30 p.m. ET, CENTCOM's Twitter and YouTube accounts were still offline.

In a statement provided to Motherboard, the Army said the data might have been accessed via a password-protected drive. Most of the data, the military agency said, is already publicly available - like the country-specific "scenarios." But some of it requires an access card, known as a TacCard, to gain entry to password-protected sites.

CENTCOM later said that its "operational military networks were not compromised and there was no operational impact to U.S. Central Command."

"We are viewing this purely as a case of cybervandalism," the agency continued. "In the meantime, our initial assessment is that no classified information was posted and that none of the information posted came from CENTCOM's server or social media sites. Additionally, we are notifying appropriate DoD and law enforcement authorities about the potential release of personally identifiable information and will take appropriate steps to ensure any individuals potentially affected are notified as quickly as possible."

CENTCOM is one of nine unified commands in the U.S. military. Its area of responsibility covers the "central" part of the globe and is made up of 20 countries: Afghanistan, Bahrain, Egypt, Iran, Iraq, Jordan, Kazakhstan, Kuwait, Kyrgyzstan, Lebanon, Oman, Pakistan, Qatar, Saudi Arabia, Syria, Tajikistan, Turkmenistan, United Arab Emirates, Uzbekistan, and Yemen.

Typically, when hackers have taken over social media accounts recently, they have done so by rather low-tech means: phishing. They send an email with a malicious attachment and hope that an unsuspecting employee will open it and provide hackers with access to their email accounts. They then have to hope that the social media account passwords are stored within those emails, or that the email account can be used to re-set passwords. There's no word on exactly how the "CyberCaliphate" hackers gained entry to CENTCOM accounts just yet.

Max Eddy contributed to this report.

Editor's Note: This story was updated with comment from CENTCOM.

Further Reading

Security Reviews