A recent report highlights a breach where 9.2 million records from Israel's Population and Immigration Authority were sold on a leak forum. The seller falsely claims the data is from 2026, but investigations reveal that the records are actually from 2005. The database includes national ID numbers, addresses, and family links, formatted as a 7.5 GB file. Authenticity checks showed that while the data is real, all date fields (births, deaths, and immigration) stop in 2005, indicating it is not a current registry.
The seller, known as GordonFreeman, has a reputation for selling recycled national databases and attempted to validate the authenticity of the dataset by providing more records that similarly confirmed the 2005 cutoff. This incident underscores the long-term risks associated with outdated data that can still pose identity theft threats.