The World Food Programme suffered a data breach of its self-registration application for Palestinian beneficiaries, where attackers gained unauthorized access to personal data including names, IDs, phone numbers, and locations of approximately 600,000 households. The specific attack vector, vulnerability details, and version information were not disclosed in the report. The platform has been temporarily suspended for security enhancements, and affected individuals have been warned to be cautious of suspicious communications.
Breach World Food Programme reports data breach affecting Palestinian beneficiaries June 4, 2026 Share By SC Staff (Adobe Stock) Coverage from Bleeping Computer indicates that the United Nations' World Food Programme (WFP) has experienced a data breach impacting its self-registration application for beneficiaries in Palestine. The World Food Programme confirmed a breach of its self-registration application (SRA) for Palestine, which occurred on May 14. Attackers gained access to personal data of individuals registered for assistance in Gaza, including names, ID numbers, phone numbers, and location details. The WFP stated that approximately 600,000 Palestinian households in Gaza were affected. The registration platform has been temporarily suspended to implement security enhancements. This incident is part of a pattern of data breaches affecting UN agencies, including previous incidents involving the UN itself, the UN Environment Programme (UNEP), the UN Development Programme (UNDP), and the International Civil Aviation Organization (ICAO). The WFP is investigating the breach and has warned beneficiaries to be cautious of suspicious communications requesting information or money. Source: Bleeping Computer SC Staff Related Breach Ultrahuman reports customer wellness data accessed in breach SC Staff June 4, 2026 Ultrahuman confirmed that attackers accessed customer data using credentials stolen from an employee's malware-infected laptop. Breach California sues 23andMe over 2023 data breach SC Staff June 1, 2026 The lawsuit stems from a credential-stuffing attack in October 2023, where threat actors exploited weak user credentials to access accounts. Breach Man arrested in Netherlands for hacking Ajax football club SC Staff May 28, 2026 The suspect, apprehended in Buren, is believed to have repeatedly accessed Ajax's computer systems without authorization earlier this year. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Attack Vector You can skip this ad in 5 seconds