CITY4U

CITY4U is known by that alias and has its headquarters located in Israel. The available sources do not provide further details about its founding date, ownership structure, or core business activities. No additional information regarding the organisation’s size, market reach, or specific services is disclosed in the material consulted.

On September 7 2021, a threat actor using the alias Sangkancil claimed to have exfiltrated personal data belonging to approximately seven million individuals from CITY4U. The alleged stolen information reportedly included identity cards, driver's licenses, tax bills, and real estate documents. To support the claim, the attacker published samples of the data online and referenced the Rosh Hashanah holiday in the accompanying message. Israel’s National Cyber Directorate was notified and launched an investigation into the alleged breach.

Preliminary assessments by the investigating authorities suggested that the leaked data might consist of older records rather than recently collected information. In addition to the primary data exfiltration claim, the attacker asserted that they had gained unauthorized access to multiple municipal systems alongside the breach of CITY4U. These assertions were included in the same communication that offered the stolen records for sale. The sources consulted do not provide independent verification of the extent of the alleged municipal system access.