Confidential Data of Tisza Party Donors Leaked To The Public

Ahead of the parliamentary elections, just two months before the vote, a huge scandal erupted over the vulnerability of the IT infrastructure of the main opposition party. Cybersecurity experts detected a hack of the Lunda platform, which collects donations for the Tisza Party. On February 3, the information ceased to be a rumor: a file […]

Ahead of the parliamentary elections, just two months before the vote, a huge scandal erupted over the vulnerability of the IT infrastructure of the main opposition party. Cybersecurity experts detected a hack of the Lunda platform, which collects donations for the Tisza Party. On February 3, the information ceased to be a rumor: a file containing the data of the first thousand donors was published on the LeakBase closed hacking platform.

The choice of the publication venue was not accidental – this was the forum where an attempt was made to sell data stolen from the Tisza Party application last November. However, the current leak concerns much more sensitive matters. The published part of the database contains not only the names, phone numbers and e-mail addresses of supporters, but also a complete record of their financial transfers. Fraudsters have revealed the exact amounts donated by citizens and to which projects or initiatives they were donated.

This level of detail poses a huge risk for tens of thousands of opposition supporters. Information about account movements makes fraudsters easy prey: knowing the exact amounts and dates of payments, fraudsters can make their criminal schemes look as authentic as possible. In addition, the loss of anonymity of political party sponsors is inevitably a cause for concern – it is possible that they will be pressured.

It is important to note that questions about the security of the Lunda platform arose long before the current incident. Back in the spring of 2024, when the Péter Magyar movement had just launched its website, the Office for the Protection of Sovereignty drew attention to the risks associated with using the service. The platform is owned by the Austrian company Estratos Digital, and experts warned at the time that transferring Hungarian voter data to such a system would be problematic due to the lack of transparency in the processing of information. What happened now only confirms the legitimacy of last year’s concerns about the systemic vulnerability of the party’s digital assets.

The disclosure of even a partial database typically indicates a complete compromise of the entire system. In the current situation, information security experts are urging everyone who has ever transferred money via the Lunda platform not to wait for official statements, but to act proactively. The most prudent measure is to immediately contact their bank, block the cards used to pay for donations, and request a replacement. This is the only reliable way to protect your savings from unauthorized charges, which are extremely likely after a payment information leak. Neither the Tisza party leadership nor representatives of the platform owner have commented on the extent of the incident, nor have they issued an official explanation.