Montreal: The International Civil Aviation Organization (ICAO), a Montreal-based UN agency, has confirmed an information security breach involving the alleged release of thousands of recruitment application records. According to a statement provided to Reuters on Tuesday, the breach affected data from April 2016 to July 2024.
Scope of the Breach
The cyber threat actor, identified as Natohub, claimed responsibility for releasing approximately 42,000 records from ICAO’s recruitment database. However, ICAO emphasized that the breach did not impact systems related to aviation safety or security.
“We can confirm that this incident is limited to the recruitment database and does not affect any systems related to aviation safety or security operations,” ICAO stated.
The data breach claim emerged after a post on a cybercriminal-focused website, prompting ICAO to launch an investigation.
Compromised Data Details
The leaked information reportedly includes names, email addresses, dates of birth, and employment history submitted by job applicants. ICAO clarified that the data breach did not involve financial information, passwords, passport details, or documents uploaded by applicants.
“We are also working to identify and notify affected individuals,” the agency confirmed.
Also Read | DOJ Watchdog Uncovers Misconduct Aimed at Influencing 2020 Election
Investigation and Security Measures
The investigation is ongoing, with ICAO implementing additional security protocols to safeguard its systems. A sample of the allegedly compromised records was made public earlier, according to a source who spoke to Reuters.
This incident marks the second time ICAO has faced cybersecurity challenges. In 2016, the agency was targeted in a hack but claimed to have since made substantial security improvements.
Also Read | Firestorm in Los Angeles Forces Emergency Evacuations of 30,000
About ICAO
ICAO, comprising 193 member states, plays a critical role in setting global aviation standards, including those related to runways and seat belts. The agency was established in 1944 after the United States convened over 50 allies to develop a unified air navigation system.
