FlagThis

The International Civil Aviation Organization (ICAO), a United Nations agency, has confirmed a significant data breach affecting its recruitment database. A cyberattack resulted in the theft of approximately 42,000 records containing sensitive personal information of job applicants. The compromised data includes names, email addresses, dates of birth, and employment histories. The breach occurred on the recruitment system, with no other ICAO systems, including those related to aviation safety and security, being accessed. The incident has raised concerns about the security of personal data held by international organizations.

The stolen information dates from April 2016 to July 2024 and was reportedly posted on a dark web forum. Though financial information, passwords, and passport details were not among the stolen items, officials warn that the data could be leveraged for phishing attacks. ICAO has implemented additional security measures since the incident and is working to notify affected individuals. The UN agency is actively investigating the breach and has stated that it takes the security of personal information very seriously, and they will provide further updates as the investigation continues.

ImgSrc: ciso2ciso.com

References:

• ciso2ciso.com - UN’s aviation agency confirms attack on recruitment database – Source: go.theregister.com - 26d
• @BleepingComputer - The United Nations' International Civil Aviation Organization (ICAO) has confirmed that a threat actor has stolen approximately 42,000 records after hacking into its recruitment database. - 26d
• Techzine Global - UN aviation body ICAO hacked, 42,000 records stolen - 26d
• CISO2CISO.COM & CYBER SECURITY GROUP - United Nations aviation agency hacked, recruitment database plundered – Source: www.bitdefender.com - 26d
• @jos1264 - United Nations aviation agency hacked, recruitment database plundered – Source: www.bitdefender.com - 26d
• ciso2ciso.com - United Nations aviation agency hacked, recruitment database plundered – Source: www.bitdefender.com - 25d
• SCM feed for Security Strategy, Plan, Budget - Database compromise confirmed by UN civil aviation agency - 25d
• gbhackers.com - United Nations Aviation Agency Hacked Recruitment Data Exposed - 25d
• GBHackers Security | #1 Globally Trusted Cyber Security News Platform - United Nations Aviation Agency Hacked Recruitment Data Exposed - 25d

Classification:

• HashTags: ICAO DataBreach CyberAttack
• Company: UN
• Target: ICAO
• Product: Recruitment Database
• Feature: data theft
• Type: DataBreach
• Severity: Medium