Data leak of 3,000 Israelis: details of the cyberattack

A cyberattack on the servers of the Israeli investment company Meitav Trade led to the leak of personal and financial data of over 3,000 Israelis. The company's management did not notice the breach for a long time; the vulnerability was discovered after phishing messages were sent. Attempts by fraudsters to change linked phone numbers to access accounts were recorded. The company's shares fell by more than 5%. The company claims the leak occurred on the contractor's side.

A cyberattack on the servers of the Israeli investment company Meitav Trade led to a massive leak of confidential data. Attackers gained access to protected databases containing phone numbers, passport details, and bank account information of over 3,000 Israelis. The company's management was unaware of the breach for a long time; the security gap was only revealed after hackers began mass-sending phishing SMS messages to clients disguised as verification requests. During the incident analysis, actual attempts by attackers to change linked phone numbers in the system to gain access to depositors' funds were recorded. Experts note that the tactic indicates a well-prepared attack aimed at direct financial damage. Amid the scandal, management notified the Tel Aviv Stock Exchange; the company's shares plummeted by more than 5%. Representatives of Meitav Trade claim that the leak occurred on the infrastructure of a third-party contractor, not on their own servers.