United Nations agency investigates ransomware attack, data theft

The United Nations Development Programme (UNDP) is investigating a late-March breach of local IT systems in UN City, Copenhagen, after a data-extortion actor (claimed by the 8Base ransomware group) allegedly exfiltrated human resources, procurement, and other sensitive documents. UNDP contained the affected server and is assessing impact and notifying those affected; 8Base publicly listed the stolen files on its leak site, consistent with double-extortion ransomware activity.