Likud app leaks millions of voters' data

Apparent cyberattack on ruling party's 'Elector' app leaks personal information of millions of Israeli voters; Likud says it 'thwarted an attempt' to damage digital platform
Associated Press|Updated:
A security breach in an app used by the Likud party has exposed the personal information of nearly 6.5 million Israelis to hackers, a cybersecurity expert said Monday.
  • Follow Ynetnews on Facebook and Twitter
  • The application is used for campaign management by the party, headed by Prime Minister Benjamin Netanyahu.
    2 View gallery
     ישיבת ממשלה
     ישיבת ממשלה
    Prime Minister Benjamin Netanyahu during a Cabinet meeting
    (Photo: Reuters)
    News of the data breach comes just weeks before Israelis go to the polls for the third time in under a year, on March 2.
    The Likud party acknowledged that it had "thwarted an attempt" to damage a digital platform used to recruit party supporters on election day. The party did not respond to inquiries about the data breach.
    The discovery is particularly embarrassing for the Likud party after it waged a smear campaign last year against Blue and White party leader Benny Gantz, claiming the former army chief's phone had been hacked by Iranian intelligence.
    The information included the names, addresses, ID numbers, and polling stations of eligible Israeli voters - and in some cases their phone number, gender and whether they were potential Likud voters.
    The voter roll data was exposed due to faulty security on an application the Likud Party used called Elector, which was designed by the Israeli software company Feedback.
    2 View gallery
    קלפי בחירות ראשון לציון
    קלפי בחירות ראשון לציון
    An election ballot in Rishon LeTziyon during the April 2019 elections
    (Photo: Avi Moalem )
    Noam Rotem, an Israeli security researcher who first revealed the data breach on his podcast "Cyber Cyber," said he received an anonymous tip from a hacker, which he later confirmed independently.
    Rotem said that while it remained uncertain whether Israelis' personal data had been exploited, "it is very likely to assume that we are not the only ones with access to this information."
    "It was very easy to get the data. Anyone with a regular web browser could have done it," he told The Associated Press.
    Israeli political parties receive the personal data of voters from the Central Elections Committee ahead of elections for internal campaign purposes on condition that the data remains private.
    Neither Feedback nor Elector's app designer Tzur Yamin responded to requests for comment.
    First published: 17:09, 02.10.20
    The commenter agrees to the privacy policy of Ynet News and agrees not to submit comments that violate the terms of use, including incitement, libel and expressions that exceed the accepted norms of freedom of speech.