An election app in use by Israeli Prime Minister Benjamin Netanyahu’s political party potentially exposed sensitive personal information for the country’s entire national voting registration of about 6.5 million citizens, according to Israeli media reports.
The cellphone-based program, identified as the Elector app, is meant to manage the Likud party’s voter outreach and tracking for the country’s March 2 election, according to the Haaretz newspaper. But an independent programmer reportedly spotted a breach over the weekend that potentially exposed the names, addresses, ID numbers and other private data for every registered voter in the country.
There was no immediate indication that any of the information had been downloaded before the breach was repaired, the paper said. The app’s developer told Haaretz that the flaw was quickly fixed and new security measures implemented.
But a person close to Likud said the party was braced for the possibility that information could have leaked, with worrying consequences. The comprehensive list of voters would have included personal details, including home addresses, military leaders, security officials, government operatives and others of potential interest to Israel’s enemies.
Likud, like all Israeli political parties, was given a copy of the national voter registration for campaign purposes, pledging not to pass information to a third party and to purge the data after the election. But an anonymous tipster pointed Haaretz to a vulnerability in the app used by Likud that allowed any user to access the entire registry. The tipster showed the paper’s personal details about Israeli VIPs to illustrate the kind of information available.
Netanyahu, who is fighting to keep his job in Israel’s unprecedented third election within a year, following deadlocked votes in April and September, personally beseeched Likud voters to download the app and add the names of additional potential supporters, according to the Jerusalem Post.
A Likud spokesperson did not respond to a request for comment.
Tech experts had warned in recent weeks that the Israeli election app was a privacy risk, in part because it invited users to add news names and personal information for likely voters, a possible violation of Israel’s privacy laws. Among those reporting on the risks was Haaretz’s sister paper, TheMarker, a Hebrew-language business publication.
The election security breach comes a week after a results tabulation app crashed the Iowa Democratic Party caucuses, delaying complete results for days and leading one candidate, Sen. Bernie Sanders (I-Vt.) to call for a “partial recanvass.”