The International Civil Aviation Organization (ICAO), a United Nations agency, has confirmed a significant data breach affecting its recruitment database. A cyberattack resulted in the theft of approximately 42,000 records containing sensitive personal information of job applicants. The compromised data includes names, email addresses, dates of birth, and employment histories. The breach occurred on the recruitment system, with no other ICAO systems, including those related to aviation safety and security, being accessed. The incident has raised concerns about the security of personal data held by international organizations.
The stolen information dates from April 2016 to July 2024 and was reportedly posted on a dark web forum. Though financial information, passwords, and passport details were not among the stolen items, officials warn that the data could be leveraged for phishing attacks. ICAO has implemented additional security measures since the incident and is working to notify affected individuals. The UN agency is actively investigating the breach and has stated that it takes the security of personal information very seriously, and they will provide further updates as the investigation continues.