A hacker has launched an online auction for what he claims is the personal information of 7 million Israelis, posted several images of Israeli IDs and as proof, Israel Hayom learned Wednesday.
Follow Israel Hayom on Facebook and Twitter
The hacker goes by the moniker "sangkancil." The Stories of Sang Kancil is a series of traditional fables about a clever mouse-deer, which are popular in Indonesia and Malaysia, leading National Cyber Directorate investigators to believe he is Malaysian.
On Tuesday evening, the cybercriminal surfaced online claiming to have stolen the personal information of around seven million Israelis by hacking the server of City4U, a website used by municipalities to collect various payments and levies from residents, such as municipal taxes and various fines. It is also used by city associations and water corporations for collection purposes.
According to Channel 12 News, if the scope of the data breach is true, it could be one of the biggest hacks in Israel's history. However, it appears that the information "sangkancil" has so far posted online as proof of the data he holds – ID cards, driver's licenses, and tax forms – derives from older hacks and does not include new information.
The report stressed that currently, there is no indication that the cybercriminal has been able to obtain new and valuable information.
On a Telegram page named "SANGKANCIL_ISRAEL_CITY4U" the hacker said he would offer the data as part of a "limited time offer" for one bitcoin. The cryptocurrency is currently worth $46,000 per unit.
Citing the auction was his "surprise for the Jewish new year," he noted, "They think they are safe. Haha. I will post the identities and properties of Israelis." He later added, "just wait, more surprises coming."
City4U is run by the New Automation Company. In a statement on Wednesday, the company said it is "investigating allegations of leaked information from the City4U system and is in constant contact with the National Cyber Directorate.
"Tests conducted so far have not detected any incursion of the system has been detected. City4U holds data of a few hundred thousand Israelis at most, and not in the order of magnitude mentioned by the attacker in his announcement.
"The New Automation Company invests considerable resources in information security and is certified to the information security standard ISO 27001. The company regularly conducts risk assessments and intrusion tests, as well as regular inspections of its system's vulnerability to cyberattacks. This incident remains under investigation and we will appraise the public on any new findings."
Subscribe to Israel Hayom's daily newsletter and never miss our top stories!
