developing· Security· Updated
Menora Mivtachim Fined NIS 256,000 for Delayed Security Breach Report
Israel's Privacy Protection Authority fined Menora Mivtachim Insurance NIS 256,000 for failing to immediately report a serious security breach. The incident, which occurred on November 12, 2025, exposed the personal data of 138 policyholders to an unauthorized insurance agent.
3 newsrooms · 1 language · since
What happened
- 01Israel's Privacy Protection Authority fined Menora Mivtachim NIS 256,000 for delaying a report on a serious security breach.
- 02The breach exposed the sensitive financial, salary, and medical data of 138 policyholders to an unauthorized insurance agent.
- 03Menora Mivtachim discovered the security breach on November 12, 2025, but delayed reporting it until November 27, 2025.
- 04The exposed data was extracted from a highly secure customer database containing information on approximately 2 million individuals.
- 05The Privacy Protection Authority ruled that reporting is mandatory immediately upon learning of a breach, regardless of ongoing internal investigations.
- 06The initial fine of NIS 640,000 was reduced by 60 percent due to mitigating circumstances.
- 07This penalty is the second financial sanction imposed by the authority since an amendment to the Privacy Protection Law took effect.
The breach involved an agent mistakenly gaining access to a report containing sensitive personal details of policyholders assigned to another agent. This information was extracted from Menora Mivtachim's customer database, which holds sensitive financial, salary, and medical data on approximately 2 million individuals.
Although the company discovered the breach on November 12, 2025, it did not report it to the authority until November 27, 2025, after completing an internal review. The Privacy Protection Authority emphasized that immediate reporting is mandatory upon learning of a breach and cannot be delayed for internal investigations.
The initial fine of NIS 640,000 was reduced by 60 percent to NIS 256,000 due to mitigating circumstances. This penalty represents the second time the authority has imposed financial sanctions since an amendment to the Privacy Protection Law took effect.
Summarized by baba from the reports of 3 newsrooms. Updated
Latest report: Globes. Read Globes’s originalThe coverage
3 newsrooms on this story
Who covered it
- LeftNone
- CentreNone
- RightNone
- HarediNone
- ArabNone
- Other3