Massive Israeli Personal Data Leak Sold Online for Under $30

A database containing the personal information of nearly all Israeli citizens has been discovered online, available for a small fee of a few dozen dollars. The data includes addresses, ID numbers, phone numbers, and details about close relatives. The discovery was reported by Ynet journalist Raphael Kahan on Wednesday, October 7. The website aggregates information from previously leaked databases, raising concerns that the data may have fallen into the hands of hostile actors. Despite journalists' inquiries to relevant authorities, the site remains operational.

The database is accessible via a popular messaging app using a chatbot and a dedicated website called "Agron 2026." It combines data from two major sources: the "Agron" database, leaked in 2006, and the "Elector" app database, which became publicly accessible in 2020. The "Agron" database, an illegal leak of Israel's national population registry, originated from a programmer who copied and distributed the data in 2006. It contained names, ID numbers, birth dates, addresses, marital status, parental information, country of birth, and immigration dates for Israelis, including children. The "Elector" app database, used by Israeli political parties to gather voter information, was leaked after a hack in 2021. Ynet also cited various versions of Israel's voter registry, previously distributed on CDs to parties and candidates, as sources.

The creators of the new site have consolidated this information and added cross-referencing capabilities with other services, such as searching for vehicles by license plate or parking permits for the disabled. The primary danger lies in the combination of easy access and data correlation. Ynet estimates the database has likely already reached hostile entities, who may even be operating it. The "Agron Bot 2026" service, for example, can establish familial connections; journalists confirmed that entering a single ID number can reveal an individual's immediate relatives, including siblings. This data, though potentially outdated by several years, could be used for threats and blackmail. The article warns that in the hands of criminals and terrorists, such a database becomes a potent tool, especially when combined with AI technologies, posing a greater threat than all previous leaks.

The leak highlights the ease with which information on any individual, including those in sensitive security positions, can be accessed. The article poses a hypothetical scenario of blackmailing high-ranking Mossad, Shin Bet, or military officials, particularly given the current security climate. The data could also be weaponized against political opponents, a practice reportedly common at the local government level due to weak data protection in municipalities. Journalist Raphael Kahan questions why parties and candidates have access to the voter registry, suggesting the new database's emergence might be linked to a High Court of Justice (Bagatz) ruling prohibiting the use of the "Elector" app on election day to encourage voting. The chatbot, operating on an illegally obtained database, could circumvent this ban.

Following the discovery, journalists contacted relevant authorities. However, as of the publication of the report, the bot and its associated website remained accessible. The Privacy Protection Authority stated it is investigating the matter and considering its available tools and cooperation with other law enforcement agencies.