Israeli Election Campaigns Face Dual Cybersecurity Threats From External Hackers and Internal Leaks
Israeli election systems, traditionally seen as democratic celebrations, have become high-risk arenas for cyber warfare in the digital age. A notable example was the previous hacking of Benny Gantz's mobile phone, which exposed how leaked personal and strategic information can be weaponized to disrupt entire election campaigns. Ahead of the current elections, the cybersecurity landscape is even more perilous, characterized by a 'double risk' scenario.
The first risk comes from external threats, primarily Iranian hackers and hostile actors relentlessly attempting to infiltrate election infrastructures, steal sensitive data, and sow public distrust in Israel's democratic process. The second, equally dangerous risk stems from internal sources, including political espionage, data leaks, and breaches by campaign staff seeking competitive advantages through sensitive or embarrassing disclosures.
Election campaigns operate under intense pressure, often established within days and managing vast databases containing voter information, strategic plans, campaign messages, and internal communications. This rapid setup frequently compromises information security, as many campaigns rely on unsecured communication networks, personal devices, and civilian platforms lacking adequate protection. Such vulnerabilities combined with sensitive data create significant risks.
Zeev Shtach, CEO of Komdea, a cybersecurity firm, warns against complacency and reliance on simple passwords or informal security measures. He urges party leaders and campaign teams to implement strict cybersecurity protocols immediately. These include banning private devices for campaign management, enforcing robust multi-factor authentication (MFA) using hardware or dedicated apps, and adopting a Zero Trust policy limiting access strictly to necessary information.
Shtach also highlights the importance of educating campaign workers to recognize phishing attempts and avoid downloading suspicious files, as human error remains the weakest security link. Continuous real-time monitoring for anomalies, encrypted daily backups immune to remote deletion, and comprehensive security frameworks are essential. He stresses that protecting election data is a national asset critical to Israel's fragile democracy and national resilience. The necessary cybersecurity solutions exist, and political leaders must prioritize them as seriously as their election campaigns.
