Hackers steal personal information of millions of Israelis from Likud app

A security breach in an app used by Israel’s Likud party exposed the personal information of nearly 6.5 million Israelis.

By Associated Press

Applications used for campaign management by the Likud party, headed by Israeli Prime Minister Benjamin Netanyahu, reportedly exposed the personal information of 6.5 million Israelis to hackers, a cybersecurity expert said Monday.

News of the data breach comes just weeks before Israelis go to the polls for the third time in under a year. Netanyahu is seeking reelection for a fourth consecutive term as premier on March 2 after two elections in 2019 yielded inconclusive results.

The Likud party acknowledged that it had “thwarted an attempt” to damage a digital platform used to recruit party supporters on election day. The party did not respond to inquiries about the data breach.

During the campaign last year, Likud targeted Netanyahu’s main opponent, Blue and White party leader Benny Gantz, for having his phone been hacked by Iranian intelligence.

The information in the Likud hack included the names, addresses, ID numbers, and polling stations of eligible Israeli voters — and in some cases their phone number, gender and whether they were potential Likud voters.

The voter roll data was exposed due to faulty security on an application the Likud Party used called Elector, which was designed by the Israeli software company Feedback.

Noam Rotem, an Israeli security researcher who first revealed the data breach on his podcast “Cyber Cyber,” said he received an anonymous tip from a hacker, which he later confirmed independently.

Rotem said that while it remained uncertain whether Israelis’ personal data had been exploited, “it is very likely to assume that we are not the only ones with access to this information.”

“It was very easy to get the data. Anyone with a regular web browser could have done it,” he told The Associated Press.

Israeli political parties receive the personal data of voters from the the Central Elections Committee ahead of elections for internal campaign purposes on condition that the data remains private.

Neither Feedback nor Elector’s app designer Tzur Yamin responded to requests for comment.

data breachHackersLikud