← CDU

2021 CDU Connect App — 500K voters, 18K app users exposed

2021 500.0K records affected Share on X

Data compromised

Names, addresses, ages, genders, political opinions

Technical writeup

Lilith Wittmann found vulnerability in campaign app. Exposed: names, addresses, ages, genders, political opinions. 18K app users, 1.3K supporters. "Elementary" flaw; no proper login. CDU filed criminal complaint against researcher, later apologized.

Root cause

Weak access controls; no authentication

References