Israel National Voter Registry 2020 Data Breach (Elector)
In February 2020, weeks ahead of the Israeli parliamentary election, a critical security misconfiguration in Elector (elector.co.il), a voter engagement application deployed by the Likud party and other political factions, resulted in the exposure of Israel's entire national voter roll.
Exposed Data Types
5- Government issued IDs
- Names
- Physical addresses
- Phone numbers
- Voting credentials
About This Breach
Discovered by cybersecurity researcher Ran Bar-Zik, the vulnerability allowed unauthenticated users to harvest hardcoded administrator credentials exposed directly in client-side source code, granting unfettered access to the centralized backend registry. The exposed database (elector.voters.csv) encompasses approximately 6,453,255 citizens. Compromised data points include 9-digit statutory national identification numbers (Teudat Zehut), full legal names, paternal names, residential street addresses, contact phone numbers, and assigned voting stations.
Encompassing virtually the entire eligible electorate of Israel, the incident triggered investigations by the Israeli Privacy Protection Authority (PPA). The mass correlation of statutory identity numbers with physical residences and mobile numbers poses persistent risks of targeted social engineering, financial identity theft, and synthetic impersonation.
Affected individuals are advised to exercise heightened scrutiny over unsolicited phone contacts or identity verification requests and implement hardware-backed or application-based multi-factor authentication across essential personal services.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
