‘Large volume’ of data stolen from UN agency after ransomware attack

A ransomware/extortion actor reportedly accessed multiple UNDP servers in UN City (Copenhagen) and exfiltrated a large volume of internal data, including human-resources, procurement and potentially sensitive personal information (dates of birth, passport numbers, bank details, social security numbers and family details). The group "8Base" claimed the attack and posted the data to its extortion site in late March; the UNDP acknowledged the incident and is investigating.