Last updated 1 month ago
The World Food Programme (WFP), a United Nations agency headquartered in Italy, disclosed a data breach affecting approximately 600,000 vulnerable families in Gaza who receive food aid. The breach was publicly announced on June 5, 2026, though the discovery date is not specified. The exposed records include names, contact details, family composition, and aid entitlement information for beneficiaries in the famine-threatened, war-torn territory.
The attack vector appears to be unauthorized access to WFP's beneficiary database, though the specific initial access method is not detailed in the article. No threat actor has been attributed, and no exploitation of specific vulnerabilities or CVEs is mentioned. The compromised data types are highly sensitive given the context of the affected population, which includes families in a conflict zone facing severe food insecurity.
Post-incident, the WFP has stated that aid support will continue for affected families. No regulatory body, litigation, ransom payment, or specific remediation milestones are mentioned in the article. The breach notification status and containment measures remain undisclosed.
Unauthorized access to beneficiary data
Sign in to join the discussion.
Company
Industry
Location
Disclosed
Records Affected
Attack Vector