iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The United Nations Development Programme (UNDP) said it was investigating a data-extortion cyberattack on local IT infrastructure at UN City in Copenhagen. UNDP said it learned on March 27, 2024, that a data-extortion actor had stolen information that included some human-resources and procurement records. News reports attributed the attack to 8Base, but UNDP’s public notice did not name a group.
What UNDP said happened
In a public notice dated April 16, 2024, UNDP said local IT infrastructure at UN City in Copenhagen had been targeted. The agency said it received a threat-intelligence notification on March 27 that a data-extortion actor had stolen data, including certain human-resources and procurement information. UNDP’s notice did not specify how much data was taken or how many people were affected.
UNDP described steps to identify a potential source, contain the affected server, determine what data was exposed and who might be affected, contact impacted people, and inform partners across the UN system. It said its assessment was ongoing when the notice was issued.
Free tools Windows power users keep installed
One-click scans. No signup required.
What kinds of information were involved?
UNDP’s notice names human-resources and procurement information but does not list specific fields. In contemporaneous reporting, Recorded Future News quoted a UNDP spokesperson saying the information included personally identifiable information for some current and former personnel, as well as procurement information relating to some suppliers and contractors. Those details were attributed to the spokesperson by the outlet, rather than itemized in the official notice. Recorded Future News reported the spokesperson’s account on April 17, 2024.
#1 Best Overall
Was 8Base responsible?
Recorded Future News and SecurityWeek reported that the ransomware group 8Base claimed the attack and that data had been published. That is a claim attributed to the group in media coverage, not an attribution made in UNDP’s public notice. The official notice refers only to a data-extortion actor. SecurityWeek’s April 18, 2024 report covered the claim and alleged publication.
What did UNDP say about its response?
UNDP said it was assessing the incident and communicating with affected parties. Recorded Future News reported that a spokesperson said affected individuals and entities for whom UNDP had current contact information were notified. The same report quoted the spokesperson as saying there was then no evidence of actual or attempted misuse and that UNDP did not engage with the threat actors; the spokesperson also said, “no ransom has or will be paid.” These were statements reported at the time, not a later confirmation about whether misuse occurred.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What remains unknown?
The available public statements and contemporaneous reports do not establish the final scope of the incident. They do not provide a confirmed count of affected people, an exact inventory or volume of stolen data, or the completed findings of UNDP’s assessment. The reported lack of evidence of misuse was time-bound to the spokesperson’s statement and should not be read as a current assurance.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11UNDP operates in 170 countries, according to Recorded Future News; that figure describes the organization’s reach, not the scale or impact of this incident.
Quick Recap
Best Value
Rank #3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
