FlagThis — Daily Cybersecurity Intelligence Briefing

The World Food Programme (WFP) experienced a critical data breach targeting its Gaza-based self-registration application, resulting in the unauthorized exfiltration of Personally Identifiable Information (PII) for approximately 600,000 households. The attack targeted the application tier or backend database, exposing names, geographic locations, and aid eligibility status. Due to the active conflict in the region, this exposure converts digital PII into high-risk intelligence for potential physical targeting and surveillance. WFP has utilized Telegram for recipient notification, while evidence of the dataset's trade has surfaced on breach forums including Breached.company.