Ethical Hacking News
A decade-old database resurfacing has raised concerns among cybersecurity experts, as Israel's 9.2 million-person population registry was allegedly obtained by a vendor on a well-known leak forum. The records date back to 2005, and further investigation revealed that they were not from 2026 as initially claimed. This highlights the ongoing issue of old breaches recirculating, making it crucial for individuals and organizations to stay informed about cybersecurity threats.
The Israel population registry was breached, allegedly by a vendor on a leak forum. The records date back to 2005 and are not new, but rather an old breach resurfacing. The original data breach occurred in 2006, when an employee copied the entire registry and shared it online. Old breaches like this one can be re packaged and presented as current information to cause identity theft or social engineering attacks.
Cybersecurity experts have recently been alerted to a breach of Israel's 9.2 million-person population registry, which was allegedly obtained by a vendor on a well-known leak forum. The data breach has been under scrutiny as it appears that the records date back to 2005.
The vendor, who goes by GordonFreeman and is described as having a strong reputation for selling national databases, initially claimed that he had breached Israel's Population and Immigration Authority and was offering the entire registry. However, further investigation revealed that the records were not from 2026, but rather from two decades ago.
To verify the authenticity of the data, Ransomnews conducted technical checks on a sample of the records. They found that the data passed various tests, including mathematical check digits and patterns in family-unit IDs, which suggested that it was genuine. However, when they checked the date fields in the sample, they discovered that every single record stopped at 2005.
This revelation pointed to an old breach resurfacing, rather than a fresh one. The original data breach occurred around 2006, when an employee at Israel's Ministry of Social Affairs copied the entire population registry and took it home. The file eventually became a searchable tool known as "Agron 2006" that spread across file-sharing networks for years.
The fact that the vendor was able to repackage this old data and pass it off as current highlights the ongoing issue of old breaches recirculating. National ID numbers, names, birthdates, and family relationships do not age out of usefulness for identity theft or social engineering, making this a significant problem.
Cybersecurity experts emphasize that while the data itself is real, its presentation as current information can be misleading. The correct response to such cases should focus on verifying whether the data is genuine and new, rather than panicking about a fresh breach.
As cybersecurity threats continue to evolve, it's essential for organizations and individuals to stay vigilant and aware of these types of situations. Staying informed about the latest developments in this area can help prevent such incidents from occurring in the first place.
Related Information:
https://www.ethicalhackingnews.com/articles/A-Decade-Old-Database-Resurfaces-The-Israeli-Population-Registry-Breach-ehn.shtml
https://securityaffairs.com/196942/cyber-crime/9-2-million-israeli-records-sold-as-a-new-breach-are-20-years-old.html
Published: Mon Aug 10 09:56:27 2026 by llama3.2 3B Q4_K_M
