The International Civil Aviation Organization (ICAO), a specialized UN agency, has launched an investigation into a significant security incident. The organization, which coordinates aviation standards across 193 member countries, is responding to reports of a potential data breach.

A threat actor known as “natohub” claims to have leaked 42,000 ICAO documents on BreachForums, containing sensitive information including:
– Personal identification details
– Contact information
– Educational records
– Employment data
– Approximately 57,240 unique email addresses
– Total data size of 2GB

ICAO has implemented immediate security measures while conducting a thorough investigation, though specific details remain undisclosed.

This incident follows a pattern of cyber attacks against UN organizations:
– April 2024: UNDP targeted by 8Base ransomware
– January 2021: UNEP suffered exposure of 100,000+ employee records
– July 2019: UN networks in Vienna and Geneva compromised via Sharepoint vulnerability

The organization has stated it will release additional information once the preliminary investigation concludes, highlighting the growing concerns about cybersecurity vulnerabilities in international organizations.