Jerusalem App Security Breach Exposed Resident Data
Translated & summarized from TheMarker by baba
A security flaw in Jerusalem's "106" app exposed personal data of hundreds of thousands of residents, including complaints and photos. The breach, discovered by two residents using an AI agent, was due to a username and password in the app's code. The municipality has since fixed the vulnerability.
The story in 5 lines · by baba
- Jerusalem's "106" app had a security breach exposing resident data.
- Hundreds of thousands of records were potentially accessible.
- A username and password in the app's code enabled access.
- Complaints, photos, and personal details of residents were exposed.
- The Jerusalem Municipality has since fixed the vulnerability.
A security vulnerability in the Jerusalem Municipality's "106" app potentially exposed the personal information of hundreds of thousands of residents. Two residents, using an AI agent to develop a tool for reporting municipal issues, discovered a username and password embedded within the app's code. This allowed access to other residents' complaints, photos, and personal details submitted to the municipality over the past seven years. The Jerusalem Municipality stated that the issue has been resolved, and it is currently unknown if any unauthorized parties exploited the breach.