UN agency ransomware attack claimed by 8Base
Threat actors have claimed a cyberattack on the computer systems of the United Nations (UN), which is now investigating the nature of the breach.
The United Nations Development Program (UNDP), the UN agency responsible for reducing inequality and poverty around the world, revealed that in March, a threat actor breached its IT systems and exfiltrated resource data. humans.
“The United Nations Development Program (UNDP) recently experienced a cyberattack, in which the target was the local IT infrastructure at United Nations City in Copenhagen,” UNDP said in a recent press release.
“On March 27, UNDP received a threat intelligence notification that a data extortion actor had stolen data including certain human resources and procurement information.
“Measures were immediately taken to identify a potential source and contain the affected server, as well as to determine the details of the exposed data and who was affected.”
UNDP added that it had launched an investigation to determine the extent of the attack and what exact data was stolen in the breach. Additionally, it has notified those affected and is communicating with other United Nations agencies and partners.
“UNDP takes this incident extremely seriously and we reiterate our dedication to data security. “We are committed to continuing to work to detect and minimize the risk of cyberattacks,” he stated.
Meanwhile, the attack was claimed by ransomware gang 8Base, which listed the UNDP on its dark web leak site.
According to the 8Base listing, the stolen data included accounting documents, personal data, employment contracts, confidentiality agreements, personal files, certificates, invoices, receipts, a “huge amount of confidential information” and more.
The listing was dated March 27, 2024, and the threat group said it would release the files on April 3, 2024. The group did so via a now-expired leak link; However, claims that the data listed above were included cannot be verified.
The UNDP has not yet commented on the leak reported by 8Base.
