UN Food Agency Investigates Data Breach Affecting Gaza Aid Recipients
The World Food Programme (WFP) is investigating a data breach impacting its self-registration application in Gaza, potentially exposing personal data of approximately 600,000 Palestinian households seeking aid.
The United Nations' World Food Programme (WFP) is currently investigating a significant security incident that compromised personal information submitted by Palestinians seeking humanitarian assistance in the Gaza Strip. The breach, disclosed via Telegram to affected individuals over the weekend, involved unauthorized parties accessing data stored within the WFP's self-registration application. This platform is used by individuals to register for essential food and cash assistance after undergoing a verification process.
The exposed data includes sensitive personal details such as names, identification numbers, phone numbers, and specific location information, including neighborhood details collected during the registration phase. In response to the incident, the WFP announced on Tuesday that it had temporarily suspended the registration platform to contain the intrusion and conduct a thorough investigation.
While the WFP has not publicly disclosed the exact number of individuals affected, a spokesperson indicated to The New Humanitarian that the breach exposed sensitive information belonging to approximately 600,000 Palestinian households in Gaza. The incident reportedly occurred on May 14 and was confined exclusively to the Self-Registration Application (SRA) utilized within Palestine.
"WFP took immediate action to shut down the platform, contain the intrusion, and strengthen its security controls to prevent further exposure," the spokesperson stated. The agency has not yet identified the perpetrators behind the intrusion or detailed the specific methods used to gain access to the system. It remains unclear whether any of the compromised information has been further disseminated.
The World Food Programme is the largest humanitarian organization globally, dedicated to combating hunger and food insecurity. It plays a critical role in Gaza, providing monthly food parcels, hot meals, bread, and cash assistance to an estimated 1.6 million people.
This incident highlights the ongoing challenges faced by humanitarian organizations in safeguarding sensitive data, particularly in conflict zones. The compromise of aid recipient data raises serious concerns about the privacy and security of vulnerable populations relying on essential humanitarian support.
Further investigation is expected to shed light on the attack vector and the full extent of the data exfiltration. The WFP's commitment to strengthening security controls is crucial to rebuilding trust and ensuring the continued safe delivery of aid.