ICAO Probes Recruitment Data Breach
The International Civil Aviation Organization is investigating a breach that exposed 42,000 recruitment records, including personal details, but assured aviation safety systems remain unaffected.
The International Civil Aviation Organization (ICAO) is investigating a potential data breach involving the alleged release of recruitment application records from April 2016 to July 2024. The incident reportedly impacted approximately 42,000 records, including personal details such as names, email addresses, dates of birth, and employment history.
According to ICAO, the breach is confined to its recruitment database and does not compromise systems related to aviation safety or security operations. The organization emphasized that no financial information, passwords, passport details, or uploaded documents were affected.
The data breach claim surfaced on a cybercriminal website, with the threat actor Natohub allegedly behind the release. A sample of the stolen data was reportedly shared publicly. ICAO has since implemented additional security measures and is working to notify affected individuals.
This marks another cybersecurity challenge for ICAO, which was previously targeted in a 2016 hack. The agency, representing 193 member states, plays a crucial role in setting global aviation standards.