iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
Threat actors have claimed a cyber attack on the IT systems of the United Nations (UN), which is now investigating the nature of the breach.
The United Nations Development Programme (UNDP), the UN agency responsible for reducing inequality and poverty around the world disclosed that in March, a threat actor breached its IT systems and exfiltrated HR data.
“The United Nations Development Programme (UNDP) recently experienced a cyber attack, in which local IT infrastructure in UN City, Copenhagen was targeted,” said the UNDP in a recent press release.
“On March 27, UNDP received a threat intelligence notification that a data-extortion actor had stolen data which included certain human resources and procurement information.
“Actions were immediately taken to identify a potential source and contain the affected server as well as to determine the specifics of the exposed data and who was impacted.”
The UNDP added that it had launched an investigation to determine the breadth of the attack and what exact data was stolen in the breach. Additionally, it has notified those affected and is reaching out to other UN agencies and partners.
“UNDP takes this incident extremely seriously, and we reiterate our dedication to data security. We are committed to continue working to detect and minimise the risk of cyber attacks,” it said.
Meanwhile, the attack was claimed by ransomware gang 8Base, which listed the UNDP on its dark web leak site.
According to the 8Base listing, the stolen data included accounting documents, personal data, employment contracts, confidentiality agreements, personal files, certificates, invoices, receipts, a “huge amount of confidential information” and more.
The listing was dated 27 March 2024, with the threat group saying it would publish the files on 3 April 2024. The group did so through a now-expired leak link; however, the claims that the above-listed data was included are unable to be verified.
The UNDP is yet to comment on 8Base’s reported leak.
Be the first to hear the latest developments in the cyber industry.
